best practices application design question

2006-11-23 Thread Chris Covington
Hi all, I made the classic newbie mistake of asking how to solve a particular pointed implementation detail without explaining the overall problem that I'm trying to solve. Suppose one wants to secure a server application which accepts incoming HTTPS connections from anywhere. We'll call this

Re: best practices application design question

2006-11-23 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Covington schrieb: Hi all, Hello Chris, Suppose one wants to secure a server application which accepts incoming HTTPS connections from anywhere. We'll call this Server A. This server application is intended to only accept connections from

Re: best practices application design question

2006-11-23 Thread Victor Duchovni
On Thu, Nov 23, 2006 at 08:51:20AM -0500, Chris Covington wrote: My thoughts were in this scenario, the best way to implement (HTTPS) SSL/TLS would be for Server A (with a server certificate) to only accept HTTPS connections from Servers 1, 2, 3, etc. who have valid client certificates,