Re: Most secure way of authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Rainer Sokoll wrote:
> On Wed, May 02, 2007 at 03:41:19PM -0700, Don Russell wrote:
>
>   
>> <Location ~ /webmail>
>> RewriteEngine   on
>> RewriteCond     %{HTTPS} =off
>> RewriteRule     .* https://%{SERVER_NAME}/webmail/ [R,L]
>> </Location>
>>     
>
> Or, without mod_rewrite:
>
> <VirtualHost x.x.x.x:80>
>   ServerName webmail.example.com
>   RedirectMatch permanent ^/(.*) https://webmail.example.com/$1
> </VirtualHost>
>   

Though that may work in many cases, the reason I do not like it is 
because the issue is not to change a request on port 80 to port 443,the 
point is to ensure https is being used.

Therefore the correct question to ask is: Is https being used? Yes, OK; 
No, adjust accordingly
and not "Is port 80 being used?" Yes, adjust accordingly.

After all, ssl *could* be used on port 80 too in which case the redirect 
is not necessary, and in fact may fail because the server has port 443 
closed.

Don Russell


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
--
squirrelmail-users mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux