Re: key storage

[George Capehart <gwc () acm org>]

On Saturday 04 September 2004 14:57, Frank Knobbe allegedly wrote:
> On Sat, 2004-09-04 at 13:53, Frank Knobbe wrote:
> > Shops with SSL terminating load-balancers (for intrusion detection
> > reasons) already take advantage of that... although they are mostly
> > unaware of that :)
>
> In all fairness I should mention that these shop lose the advantage
> of SSL to the server which allows an intruder to sniff the traffic at
> the server. But at least they don't get the certificate.
>
> Of course the question is, which is more important. Confidentiality
> of the key, or confidentiality of the date you are trying to protect
> :)

If the load balancers and the Web server(s) use IPSec among themselves, 
that would solve the problem, wouldn't it?

BR,

/g
-- 
George W. Capehart

Key fingerprint:  3145 104D 9579 26DA DBC7  CDD0 9AE1 8C9C DD70 34EA

"With sufficient thrust, pigs fly just fine."  -- RFC 1925