[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ale] How secure is http basic authentication?
Startcom StartSSL offers free basic certs. Domain verified only. But you
still have to run a VPS or a host willing to let you install your own
certs. (Since SNI is not widely deployed, deploying SSL usually requires
its own IP.)
On Sat, Apr 27, 2013 at 10:10 AM, Ron Frazier (ALE) <
atllinuxenthinfo at techstarship.com> wrote:
> Hi Jim,
> You could try DigiCert for your certificates. Steve Gibson likes them and
> has talked about them on his Security Now podcast. He says they have good
> pricing. You can find transcripts of where he's talked about them by
> googling this:
> digicert site:grc.com
> I don't have any personal info on it. Just relaying the data.
> On 4/27/2013 10:05 AM, Jim Lynch wrote:
>> On 04/27/2013 09:54 AM, Phil Turmel wrote:
>>> It's in the clear. It's just not obvious because it is base64 encoded.
>> OK so that means I shouldn't use it without an ssl connection. That
>> pretty much rules out using it with any of my hosted accounts since they
>> don't do ssl without too much money for a cert. Fortunately I only have
>> one of those left. I'm slowly replacing my hosted accounts with VPS.
> (PS - If you email me and don't get a quick response, you might want to
> call on the phone. I get about 300 emails per day from alternate energy
> mailing lists and such. I don't always see new email messages very
> Ron Frazier
> 770-205-9422 (O) Leave a message.
> linuxdude AT techstarship.com
> Litecoin: LZzAJu9rZEWzALxDhAHnWLRvybVAVg**wTh3
> Bitcoin: 15s3aLVsxm8EuQvT8gUDw3RWqvuY9h**PGUU
> Ale mailing list
> Ale at ale.org
> See JOBS, ANNOUNCE and SCHOOLS lists at
david at systemoverlord.com
-------------- next part --------------
An HTML attachment was scrubbed...