From owner-freebsd-questions  Thu Sep  6 20:56:53 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-54.dsl.lsan03.pacbell.net [63.207.60.54])
	by hub.freebsd.org (Postfix) with ESMTP id 7FFAB37B409
	for <freebsd-questions@FreeBSD.ORG>; Thu,  6 Sep 2001 20:56:46 -0700 (PDT)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 00E1966D24; Thu,  6 Sep 2001 20:56:45 -0700 (PDT)
Date: Thu, 6 Sep 2001 20:56:45 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: ann kok <annkok2001@yahoo.com>
Cc: Kris Kennaway <kris@obsecurity.org>,
	freebsd-questions@FreeBSD.ORG
Subject: Re: http and https
Message-ID: <20010906205645.A45979@xor.obsecurity.org>
References: <20010906170518.A88048@xor.obsecurity.org> <20010907034752.13664.qmail@web20107.mail.yahoo.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="nFreZHaLTZJo0R7j"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010907034752.13664.qmail@web20107.mail.yahoo.com>; from annkok2001@yahoo.com on Thu, Sep 06, 2001 at 08:47:52PM -0700
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


--nFreZHaLTZJo0R7j
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Sep 06, 2001 at 08:47:52PM -0700, ann kok wrote:
> Dear Kris
>=20
> --- Kris Kennaway <kris@obsecurity.org> wrote:
> > On Thu, Sep 06, 2001 at 03:43:49PM -0700, ann kok
> > wrote:
> > > Dear all
> > >=20
> > > What is the different between http and https?
> > >
> > > I only know https is secuirty than http
> > > but what is this level of the secuity
> >=20
> > It uses SSL to secure the transport.
>=20
> Do you mean all transport bits are encryped?
> I can't read it even though on physical level?

Yes.  That's part of the point of https (confidentiality and integrity
of the data stream).  The other part is authentication of the endpoint
(usually only the server).

> > > In addition, https provides the certification
> > > but what is the function of this certification
> >=20
> > Authentication of one or both endpoints so the other
> > knows that
> > they're talking to the person they think they are.
> >=20
>=20
> Why does some https have CA address?

I'm not sure what you mean.

Kris

--nFreZHaLTZJo0R7j
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7mEV9Wry0BWjoQKURAvxKAJ4sh+HJDUtRDf1HXC6FFOCXFgqJ/QCgpwxi
Nb8QpIcmWKjuMKwHQRo5DzE=
=lFYc
-----END PGP SIGNATURE-----

--nFreZHaLTZJo0R7j--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message