3 ms·
Are there that many situations where you can't just put a SSL proxy in front of a standard HTTP server, and keep the application itself simpler? If I were a sy
by hannibalhorn 11y ago
Are there that many situations where you can't just put a SSL proxy in front of a standard HTTP server, and keep the application itself simpler?
If I were a sysadmin in charge of just keeping in-house applications running, I'd really hate it if some SSL layer bug meant I had to figure out how to recompile some custom application - especially one using boost! - not to mention figuring out how to update certificates and that sort of thing.
- KayEss 11y agoI also would tend to agree on this, if you're talking server sockets. With client sockets this is still very relevant though.
- kjs3 11y agoThere are some compliance related situations where having unencrypted data on the wire can trigger audit issues, but that's an artificial circumstance and you're correct that an SSL proxy is almost always easier to impliment.