https://issues.apache.org/bugzilla/show_bug.cgi?id=46005

           Summary: Server to Client Negoteated Encryption Feature Request
           Product: Apache httpd-2
           Version: 2.3-HEAD
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Core
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


I suggest implementing a security feature that would allow clients and servers
to negotiation a secure connection. No doubt it would not be anywhere near fool
proof, but the intention would be to prevent data from being transported in the
open, so one would need to "open the envelope" in order to see the
communication.

My thought is a protocol that the server and client would work out. The website
would not have anything to do with this. Ether the browser or server would be
able to decline the secure connection.

I was also hoping it could be encrypted with "open" technology so it could be
distributed with apache without restriction. No matter if the encryption can be
"broken" relatively easily, its intent would not be to secure highly sensitive
information, but rather to obscure the information on net so snoopers have a
harder time collecting emails, or "unsecured" pass phrases. Or to remove from
plain sight everything that is happening.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to