digital signing vs. full encryption.

--0-1328011060-1140804579=:74674
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Hi:
My question relates to the possibility of selectively enabling digital en=
cryption vs. digital signing when using the mod_ssl with Apache 2.0.

The motivation for the tradeoff is due to performance.

So ideally, we might want to enable a client to login using a secure fo=
rm over https that would be encrypted.

However, once logged in, the subsequent client requests [for documents]=
could be served up using digital signing. Encryption may not be strictly=
required.

I was wondering if it would be possible to install mod_ssl, Apache2.0, =
a thwate/Verisign server certificate and be able to serve the login form =
over https/encryption and the subsequent documents over digital signature=
s.

If this is possible, could you pl. point me, or tell me what I'd need t=
o do in terms of the configuration file?

Thanks in Advance.

Arjun Khanna.

=09
---------------------------------
Relax. Yahoo! Mail virus scanning helps detect nasty viruses!
--0-1328011060-1140804579=:74674
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<div>Hi:<BR>My question relates to the possibility of selectively enablin=
g digital encryption vs. digital signing when using the mod_ssl with Apac=
he 2.0. </div> <div> </div> <div>The motivation for the tradeoff i=
s due to performance.</div> <div> </div> <div>So ideally, we might=
want to enable a client to login using a secure form over https that wou=
ld be encrypted.</div> <div> </div> <div>However, once logged in, =
the subsequent client requests [for documents] could be served up using d=
igital signing. Encryption may not be strictly required.</div> <div>&nbs=
p;</div> <div>I was wondering if it would be possible to install mod_ssl=
, Apache2.0, a thwate/Verisign server certificate and be able to serve th=
e login form over https/encryption and the subsequent documents over digi=
tal signatures.</div> <div> </div> <div>If this is possible, could=
you pl. point me, or tell me what I'd need to do in terms of the configu=
ration file?</div> <div> </div>
<div>Thanks in Advance.</div> <div> </div> <div>Arjun Khanna.</di=
v><p>
<hr size=3D1>Relax. Yahoo! Mail
<a href=3D"http://us.rd.yahoo.com/mail_us/taglines/virusall/*http://commu=
nications.yahoo.com/features.php?page=3D221">virus scanning</a> helps det=
ect nasty viruses!
--0-1328011060-1140804579=:74674--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org
Arjun Khanna [ Fr, 24 Februar 2006 19:09 ] [ ID #1203025 ]

Re: digital signing vs. full encryption.

> Hi:
> My question relates to the possibility of selectively enabling digital
> encryption vs. digital signing when using the mod_ssl with Apache 2.0.
>
> The motivation for the tradeoff is due to performance.
>
> So ideally, we might want to enable a client to login using a secure
> form over https that would be encrypted.
>
> However, once logged in, the subsequent client requests [for document=
s]
> could be served up using digital signing. Encryption may not be strictl=
y
> required.
>
> I was wondering if it would be possible to install mod_ssl, Apache2.0=
, a
> thwate/Verisign server certificate and be able to serve the login form
> over https/encryption and the subsequent documents over digital
> signatures.
>
> If this is possible, could you pl. point me, or tell me what I'd need=
to
> do in terms of the configuration file?
>

mod_ssl implement Secure SOCKET Layer, you want HTTP with digital
signature, which is something quite different. Look into web services,
they probably have something like what you're after.

-a
--
Aaron Stromas | "Tik-tik-tik!!!... ja, Pantani is weg..."
mailto:ams [at] izoard.com | BRTN commentator
+1 (301) 493 4933 | L'Alpe d'Huez
http://www.izoard.com | 1995 Tour de France




____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org
Aaron Stromas [ Fr, 24 Februar 2006 20:26 ] [ ID #1203026 ]
Webserver » gmane.comp.apache.mod-ssl.user » digital signing vs. full encryption.

Vorheriges Thema: HTTPS max post size?
Nächstes Thema: toggling signing and encryption using Mod_SSL + certificates