[ale] How secure is http basic authentication?

[David Tomaschik]

Startcom StartSSL offers free basic certs.  Domain verified only.  But you
still have to run a VPS or a host willing to let you install your own
certs.  (Since SNI is not widely deployed, deploying SSL usually requires
its own IP.)


On Sat, Apr 27, 2013 at 10:10 AM, Ron Frazier (ALE) <
atllinuxenthinfo at techstarship.com> wrote:

> Hi Jim,
>
> You could try DigiCert for your certificates.  Steve Gibson likes them and
> has talked about them on his Security Now podcast.  He says they have good
> pricing.  You can find transcripts of where he's talked about them by
> googling this:
>
> digicert site:grc.com
>
> I don't have any personal info on it.  Just relaying the data.
>
> Sincerely,
>
> Ron
>
>
>
> On 4/27/2013 10:05 AM, Jim Lynch wrote:
>
>> On 04/27/2013 09:54 AM, Phil Turmel wrote:
>>
>>> It's in the clear.  It's just not obvious because it is base64 encoded.
>>>
>>> Phil
>>>
>> OK so that means I shouldn't use it without an ssl connection.  That
>> pretty much rules out using it with any of my hosted accounts since they
>> don't do ssl without too much money for a cert.  Fortunately I only have
>> one of those left.  I'm slowly replacing my hosted accounts with VPS.
>>
>> Thanks,
>>
>> Jim.
>>
>>
> --
>
> (PS - If you email me and don't get a quick response, you might want to
> call on the phone.  I get about 300 emails per day from alternate energy
> mailing lists and such.  I don't always see new email messages very
> quickly.)
>
> Ron Frazier
> 770-205-9422 (O)   Leave a message.
> linuxdude AT techstarship.com
> Litecoin: LZzAJu9rZEWzALxDhAHnWLRvybVAVg**wTh3
> Bitcoin: 15s3aLVsxm8EuQvT8gUDw3RWqvuY9h**PGUU
>
>
> ______________________________**_________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/**listinfo/ale<http://mail.ale.org/mailman/listinfo/ale>
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/**listinfo<http://mail.ale.org/mailman/listinfo>
>



-- 
David Tomaschik
OpenPGP: 0x5DEA789B
http://systemoverlord.com
david at systemoverlord.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20130427/a61485cb/attachment.html>