Re: Break it down for n00bs: security problems of non-SSL intranet?

2006-10-05 Thread Tom Chiverton
On Wednesday 04 October 2006 19:30, Bobby Hartsfield wrote: > Hmmm... free, public wife... now there's a concept lol! Several city's here in the UK are putting it in. Even some places in the US have it, apparently. -- Tom Chiverton Helping to dynamically visualise frictionless action-items ***

RE: Break it down for n00bs: security problems of non-SSL intranet?

2006-10-04 Thread Bobby Hartsfield
Hmmm... free, public wife... now there's a concept lol! That would of course be wifi. -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.407 / Virus Database: 268.12.12/462 - Release Date: 10/3/2006 ~

RE: Break it down for n00bs: security problems of non-SSL intranet?

2006-10-04 Thread Bobby Hartsfield
PROTECTED] Sent: Wednesday, October 04, 2006 12:02 PM To: CF-Talk Subject: Re: Break it down for n00bs: security problems of non-SSL intranet? On Wednesday 04 October 2006 16:09, Bobby Hartsfield wrote: > bruteforce of the complete login criteria. So yeah, you are right in that > it may not b

Re: Break it down for n00bs: security problems of non-SSL intranet?

2006-10-04 Thread Tom Chiverton
On Wednesday 04 October 2006 16:09, Bobby Hartsfield wrote: > bruteforce of the complete login criteria. So yeah, you are right in that > it may not be very reliable. But I wouldn't call it overkill since it's > more reliable than say... nothing. Well, it's always a trade off :-) When I'm on publi

RE: Break it down for n00bs: security problems of non-SSL intranet?

2006-10-04 Thread Bobby Hartsfield
Wednesday, October 04, 2006 10:14 AM To: CF-Talk Subject: Re: Break it down for n00bs: security problems of non-SSL intranet? On Monday 02 October 2006 20:02, Bobby Hartsfield wrote: > VPN is your friend. :-) Typically, a VPN isn't any more reliable from a security PoV than SSL, an

Re: Break it down for n00bs: security problems of non-SSL intranet?

2006-10-04 Thread Tom Chiverton
On Monday 02 October 2006 20:02, Bobby Hartsfield wrote: > VPN is your friend. :-) Typically, a VPN isn't any more reliable from a security PoV than SSL, and most of the time is overkill anyway. -- Tom Chiverton Helping to completely grow market-driven environments

Re: Break it down for n00bs: security problems of non-SSL intranet?

2006-10-02 Thread Eric Haskins
H.. None of our Intranet sites running SSL except for our VPN Concentrator which doesn't count as intranet. Our network is built with 2 Firewalls (Service and Internet) both with redundant backups (so 4 total) Our E-commerce sites sit in between the 2 firewalls and are totally Isolated fr

RE: Break it down for n00bs: security problems of non-SSL intranet?

2006-10-02 Thread Bobby Hartsfield
Kenna [mailto:[EMAIL PROTECTED] Sent: Monday, October 02, 2006 2:27 PM To: CF-Talk Subject: Break it down for n00bs: security problems of non-SSL intranet? Could someone please help break this down for me so that even the most clueless of project managers could understand? What are the security im

Break it down for n00bs: security problems of non-SSL intranet?

2006-10-02 Thread Damien McKenna
Could someone please help break this down for me so that even the most clueless of project managers could understand? What are the security implications of having an intranet *not* secured using SSL when it is behind an existing beefy hardware firewall? I know it is standard practice to do