RE: OpenSSL (FIPS) w/Apache on Windows

2007-08-02 Thread Security Admin (NetSec)
Microsoft FIPS implementation is broken. I tried to use it with the GPO enabled for communication between Postfix mail gateway and Exchange 2007 and it did not work. Troubleshooting revealed the FIPS issue. I called into Microsoft and they are aware of the problem, however they have no plans

RE: use ssl for ssh transport layer (not proxy bypassing)

2007-07-02 Thread Security Admin (NetSec)
"I sure would appreciate if someone could tell me if this is a bad idea and why, the more I know now at this time the better." Encryption adds latency to your traffic, double encryption just adds another delay. While this extra layer of security may be necessary for servers that have processin