RE: RPC over HTTP security

["Kevin Doheny" <kdoheny () CNP net>]

SSL in and of itself provides very little security... Way to easy to
hack.  Look into a Neoteris (now Juniper) SSL VPN/Proxy.  This way evil
hack3r can not ride the SSL stream into your network and past any IDS or
IPS systems. 

Kevin 

-----Original Message-----
From: Shawn Wall [mailto:sjwall () shaw ca] 
Sent: Wednesday, January 26, 2005 11:04 PM
To: sf_mail_sbm () yahoo com; security-basics () securityfocus com
Subject: RE: RPC over HTTP security

Are you using Exchange? Why not use OWA and secure it with SSL?

shawn 

-----Original Message-----
From: sf_mail_sbm () yahoo com [mailto:sf_mail_sbm () yahoo com] 
Sent: Wednesday, January 26, 2005 6:03 AM
To: security-basics () securityfocus com
Subject: RPC over HTTP security



Hi List,
We are thinking about deploying RPC over HTTP to access email from the
Internet

Wanted to get some information on the technology and the security
implications of same

Not much info from Microsoft's site

any help would be greatly apreciated

Thanks,
Ronish