From owner-freebsd-questions  Mon Apr 15 12:10:29 1996
Return-Path: owner-questions
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id MAA24307
          for questions-outgoing; Mon, 15 Apr 1996 12:10:29 -0700 (PDT)
Received: from phaeton.artisoft.com (phaeton.Artisoft.COM [198.17.250.211])
          by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id MAA24292
          Mon, 15 Apr 1996 12:10:21 -0700 (PDT)
Received: (from terry@localhost) by phaeton.artisoft.com (8.6.11/8.6.9) id MAA09288; Mon, 15 Apr 1996 12:05:33 -0700
From: Terry Lambert <terry@lambert.org>
Message-Id: <199604151905.MAA09288@phaeton.artisoft.com>
Subject: Re: FreeBSD as DNS
To: sameer@c2.org
Date: Mon, 15 Apr 1996 12:05:33 -0700 (MST)
Cc: gpalmer@FreeBSD.ORG, brandon@tombstone.sunrem.com, questions@FreeBSD.ORG
In-Reply-To: <199604142037.NAA15963@atropos.c2.org> from "sameer@c2.org" at Apr 14, 96 01:37:03 pm
X-Mailer: ELM [version 2.4 PL24]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> 	Sorry, I was tired. I meant that just because your web server
> software runs SSL doesn't mean you've fixed all the security problems
> with your web server installation.
> 
> > 
> > Sorry???? What on earth does SSL capable WWW servers have to do with
> > sendmail? They are two COMPLETELY different topics... Do you have a
> > grudge against sendmail or something?

Gary: It's a semantic distinction between "secure server" and
"secure service".

It's likely that if you have a mchine with credit card data on it,
you would want "secure server" as well as "secure service".

Personally, I think it's just plain common sense to have a secure WWW
service offered on a machine with all other ports switched off and/or
firewalled from access.


					Terry Lambert
					terry@lambert.org
---
Any opinions in this posting are my own and not those of my present
or previous employers.