Hi all,
I am planning to use SSL for the communication
between my client and server. The idea is to use SSL *mainly* for peer
authentication and validation (Both server and client authentication by means of
certificates). Regarding the data encryption, I would like to have it as an
optional feature.
The motivation behind this desirable feature is
that in a particular environment, I am not really worried about the data, but
the client talking to my server. I would like to give up on encryption in favor
of performance.
So the questions are:
1) Is it possible to use SSL only for the sake of
peer authentication + validation and transfer un-encrypted data over this
channel ?
2) Would sacrificing on encryption *really*
improve the performance ?
Thanks,
~ Urjit
PS: This is my first mail to this list. So, in
case, you think that my questions are out of the scope of this group, or you
know of some other group which can yield me better answers, could you please
point me to such groups ?
|
- Can I have SSL for peer authentication only? (and not f... Urjit Gokhale
- Re: Can I have SSL for peer authentication only? (... Alain Damiral
- Re: Can I have SSL for peer authentication onl... Kyle Hamilton
- Re: Can I have SSL for peer authentication... Alain Damiral
- Re: Can I have SSL for peer authentication only? (... Bernhard Froehlich
- Re: Can I have SSL for peer authentication onl... Richard Koenning
- Re: Can I have SSL for peer authentication only? (... Katie Lucas
- Re: Can I have SSL for peer authentication onl... Kyle Hamilton
- Re: Can I have SSL for peer authentication... Urjit Gokhale
- RE: Can I have SSL for peer authentica... Ambarish Mitra
- Re: Can I have SSL for peer authentication onl... Alain Damiral