RE: RPC over HTTP security

["Roger A. Grimes" <roger () banneretcs com>]

I found tons of links on http://www.microsoft.com/security.

Try this one.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rpc/rpc
/rpc_over_http_security.asp 

Or the HTTP over RPC Deployment Guide
http://www.microsoft.com/downloads/details.aspx?familyid=ef58395d-3710-4
9cf-9698-938e2bef39e8&displaylang=en

XP's Help and Support Center help pulled up 15 KB articles on the
subject, W2K3's help pulled up 41.

If all of MS's documentation doesn't work for you, consider
www.windowsitpro.com and search on 'http over rpc'.

Roger

************************************************************************
***
*Roger A. Grimes, Banneret Computer Security, Computer Security
Consultant 
*CPA, CISSP, MCSE: Security (NT/2000/2003/MVP), CNE (3/4), CEH, CHFI
*email: roger () banneretcs com
*cell: 757-615-3355
*Author of Malicious Mobile Code:  Virus Protection for Windows by
O'Reilly
*http://www.oreilly.com/catalog/malmobcode
*Author of Honeypots for Windows (Apress)
*http://www.apress.com/book/bookDisplay.html?bID=281
************************************************************************
****



-----Original Message-----
From: sf_mail_sbm () yahoo com [mailto:sf_mail_sbm () yahoo com] 
Sent: Wednesday, January 26, 2005 8:03 AM
To: security-basics () securityfocus com
Subject: RPC over HTTP security



Hi List,
We are thinking about deploying RPC over HTTP to access email from the
Internet

Wanted to get some information on the technology and the security
implications of same

Not much info from Microsoft's site

any help would be greatly apreciated

Thanks,
Ronish