Chronology | Current Month | Current Thread | Current Date |
[Year List] [Month List (current year)] | [Date Index] [Thread Index] | [Thread Prev] [Thread Next] | [Date Prev] [Date Next] |
From: "Mark O. Kimball" <mok2@enthalpy.physics.buffalo.edu>some
Reply-To: PHYS-L Maillist <phys-l@carnot.physics.buffalo.edu>
To: "PHYS-L Maillist" <phys-l@carnot.physics.buffalo.edu>
Subject: Re: [Phys-l] PHYS-L Website certified by an unknown authority
Date: Thu, 16 Feb 2006 13:06:54 -0500 (EST)
Hi Folks,
I am surprised that the PHYS-L site is not certified by Verisign or
insimilar authority. While I would not under any circumstances include
troublingPHYS-L correspondence personal information, I still find it
thanthat the certificate is issued by the host machine of PHYS-L rather
security,an external authority. I am not at all an expert on computer
serverbut when my browser tells me that it has no guarantee that a site isconcerned
genuine, I am strongly inclined to avoid that site. Should I be
about this?
Someone please correct me if I am wrong:
The original list hosted by NAU did not use encrypted communication (at
least not to the archives) so the validity of the identity of the
was not an issue for that list.need
Does the list need a trusted authority? It is open to anyone wishing to
join and does allow public viewing of the archives. There is no real
for secure access to the archives. However, a secure communication withrun
the pages used to modify an individual's settings is desirable.
VeriSign states a certificate, valid for one year, costs $349. Since
Phys-l has a budget of $0 (unless I am severely misinformed), and is
by volunteers, this cost would be out-of-pocket.pipe
It was my decision to use the https:// port exclusively so all
communication is encrypted (I tend to do this when possible). I could
simply allow most traffic to use the insecure http:// port and only
communication with the membership modification pages through https://.upon
Is this what the list wants? Even if the access is changed depending
which pages are viewed, this does not get around the untrustedauthority
issue for the secure membership modification pages.
Thoughts? Comments?
Mark
--
Mark O. Kimball
Gasparinilab, University at Buffalo | Low Temperature Physics
mok2@physics.buffalo.edu | http://enthalpy.physics.buffalo.edu
Lab Phone: 716-645-2017x122 | Fax: 716-645-2507
_______________________________________________
Phys-l mailing list
Phys-l@carnot.physics.buffalo.edu
https://carnot.physics.buffalo.edu/mailman/listinfo/phys-l