RE: SSL v IPSEC for management?

[Waters Stephen <stephen.Waters@cabletron.com>]

SSL is a general socket-level protection that does allow two-way
authentication. S-HTTP is security at the 'application' layer just for HTTP.


Since neither of these protect the IP header (or other bits?), then I'm
assuming it is not as secure as IPSEC streams - e.g. exposure to address
spoofing, relay-attacks, others?

Cheers, Steve.

-----Original Message-----
From: John Shriver <jas@shiva.com> at EUROINTERNET 
Sent: Monday, January 25, 1999 6:30 PM
To: Waters Stephen
Subject: RE: SSL v IPSEC for management? 


If SSL is what's under Secure HTTP, there's the issue that only the
"server" is authenticated, not the client.

---

Follow-Ups:

• RE: SSL v IPSEC for management?
• From: Stephen Kent <kent@bbn.com>

---

• Prev by Date: New archive of the IPsec mailing list
• Next by Date: RE: SSL v IPSEC for management?
• Prev by thread: SSL v IPSEC for management?
• Next by thread: RE: SSL v IPSEC for management?
• Index(es):
  • Main
  • Thread