Hi, >From personal experience, I've found the following two topics exceptionally handy:
1. Following all the threads in the mailing list 2. Eric Rescorla's book, SSL and TLS, Designing and building Secure systems (www.rtfm.com) 3. There's also a few loose guides, like the one on Linuxdoc, etc. that help with key concepts I've used SSL to secure our VPN, and it works great. Pascal -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Anderson Farias Sent: Sunday, 17 February 2002 12:07 p.m. To: [EMAIL PROTECTED] Subject: newbie question Hi, I'm a software developer that uses Interbase as my backend database. I have no expertise/knowlege on SSL and fewer on TCP/IP and networking. I was discusing at an Interbase newsgroups about the easy to break encription of Interbase username/password over the net during connection (client to server) and more, data is not encripted to be sent over network. So, using Interbase over INTERNET is not a good idea (as any snifer can get your passord/data). So, Bill Todd (TeamB) came with "How about SSL or VPN?". Well, I thought (think in the past :) sorry my poor english) I could not use SSL other than with Web Servers (like Apache and IIS) but then I got curious... Can I make my (C/S) database connection over SSL (using TCP/IP)?? If Yes, what do I need?? The database engine has to implement something?? --> How does SSL works?? Well, I'm sorry for so "open" questions, if you can point me any "direction", give me some references and docs I should read, I'd be thankfull!! Thanks to any help, Regards. Anderson Farias [EMAIL PROTECTED] PS> I use Interbase server at both WindowsNT and Linux OSs. And client at Windows9x. ------- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
