On Wed, 20 Sep 2000, Steve Luzzi wrote:
> Ralf,
>
> Please let me clarify. Our situation is that the CA
> for our cert will be the US Dept. of Defense, thus
> won't be automatically installed in any browser
> until the user/robot successfully accepts the cert.
> We're concerned that the Internet search engines/robots
> will not be able to perform the cert acceptance phase
> and thus stop indexing our data. We want them to continue
> crawling our site if we are required to SSL-enable our
> public information (I understand what SSL does and doesn't
> do for us).
>
> Can anyone answer this question?
Steve:
After installing the DoD PKI Med Root CA certificates, there has been no
evidence that any search engine has attempted to index any PHD NSWC web
site. Nor do I recall any attempts by a search engine to index any of the
web sites when i was using Verisign/RSA Secure Server CA certificates.
The logs indicate that the search engines make an attempt to index all PHD
NSWC web sites but do not proceed further when the 302 status is returned to
redirect them to the SSL/TLS port. The public access and community service
web sites that are not redirected to an SSL/TLS port are indexed.
The decision not to proceed when redirected to an SSL/TLS port may be no
more than a prudent financial and risk avoidance decision on the part of the
search engine operators. Indexing what may be personal and financial data
might not be the smartest move should you want to do something other than
spend your time in court.
Merton Campbell Crockett
General Dynamics Electronic Systems
Network & IT Engineering
Chief Network/Security Engineer, IT/TIS Program
Naval Surface Warfare Center, Port Hueneme Division
> > On Tue, Sep 19, 2000, Steve Luzzi wrote:
> >
> > > At the risk of this being off-topic, I was wondering
> > > if anyone knows whether the major Internet search
> > > engines/indexers (Yahoo, Lycos, Altavista, etc.) have
> > > the capability of indexing a site's data after it
> > > switches from a non-SSL to an SSL-enabled site?
> >
> > Using SSL without any additional access control mechanisms just means that the
> > server authenticates itself to the client and that the data transfer is
> > encrypted. But nevertheless _everybody_ still can access the site. Seems like
> > you still have not fully understood what SSL does and what not. Please read
> > the Introduction chapter in the mod_ssl User Manual or consult other papers or
> > books for details.
> > Ralf S. Engelschall
> > [EMAIL PROTECTED]
> > www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
