[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: restricting wireless access



also sprach Jeff <jcoppock1@attbi.com> [2003.01.12.1953 +0100]:
> Thinking about it, what I described above really isn't a proxy but
> rather an offload of the SSL part of HTTPS.  However, the clear text
> HTTP on the backend could then be proxied.  I've not seen this done
> though.

I know this is possible. But you are giving up one big feature of SSL:
The authenticity check of the peer. In any case, this is only really
applicable to reverse proxying. I want a forward proxy, if at all.

> I agree that SSH cannot be proxied, but the big reason for it,

You can proxy SSH in exactly the same way. Not with on-board methods,
but in theory it's possible.

-- 
Please do not CC me! Mutt (www.mutt.org) can handle this automatically.
 
 .''`.     martin f. krafft <madduck@debian.org>
: :'  :    proud Debian developer, admin, and user
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
NOTE: The pgp.net keyservers and their mirrors are broken!
Get my key here: http://people.debian.org/~madduck/gpg/330c4a75.asc

Attachment: pgpXElKsyHiU7.pgp
Description: PGP signature


Reply to: