Re: best practices application design question

2006-11-23 Thread Victor Duchovni
On Thu, Nov 23, 2006 at 08:51:20AM -0500, Chris Covington wrote: > My thoughts were in this scenario, the best way to implement (HTTPS) > SSL/TLS would be for Server A (with a server certificate) to only > accept HTTPS connections from Servers 1, 2, 3, etc. who have valid > client certificates, ra

Re: best practices application design question

2006-11-23 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Covington schrieb: > Hi all, Hello Chris, > Suppose one wants to secure a server application which accepts > incoming HTTPS connections from anywhere. We'll call this Server A. > This server application is intended to only accept connections fr

best practices application design question

2006-11-23 Thread Chris Covington
Hi all, I made the classic newbie mistake of asking how to solve a particular pointed implementation detail without explaining the overall problem that I'm trying to solve. Suppose one wants to secure a server application which accepts incoming HTTPS connections from anywhere. We'll call this S