Re: SSL & IDS

[Ng Pheng Siong <ngps () POST1 COM>]

On Fri, Sep 01, 2000 at 09:36:34AM +0200, Mikael Olsson wrote:
> You'll likely have to terminate the SSL connection on a reverse proxy
> machine in front of the web server and do your IDS sniffing after that
> reverse proxy.

This seems a popular suggestion.

Given the usual statistic that 80% (or 90% or whatever) of
security compromises are internal jobs, deliberately terminating
your SSL early and then having your app talk in the clear over
your internal network is more dangerous than it is useful, IMHO.

Cheers.
--
Ng Pheng Siong <ngps () post1 com> * http://www.post1.com/home/ngps