You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2008/10/14 15:44:13 UTC
DO NOT REPLY [Bug 46005] New: Server to Client Negoteated Encryption
Feature Request
https://issues.apache.org/bugzilla/show_bug.cgi?id=46005
Summary: Server to Client Negoteated Encryption Feature Request
Product: Apache httpd-2
Version: 2.3-HEAD
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: Core
AssignedTo: bugs@httpd.apache.org
ReportedBy: drsassafras@gmail.com
I suggest implementing a security feature that would allow clients and servers
to negotiation a secure connection. No doubt it would not be anywhere near fool
proof, but the intention would be to prevent data from being transported in the
open, so one would need to "open the envelope" in order to see the
communication.
My thought is a protocol that the server and client would work out. The website
would not have anything to do with this. Ether the browser or server would be
able to decline the secure connection.
I was also hoping it could be encrypted with "open" technology so it could be
distributed with apache without restriction. No matter if the encryption can be
"broken" relatively easily, its intent would not be to secure highly sensitive
information, but rather to obscure the information on net so snoopers have a
harder time collecting emails, or "unsecured" pass phrases. Or to remove from
plain sight everything that is happening.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46005] Server to Client Negoteated Encryption
Feature Request
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46005
Nick Kew <ni...@webthing.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID
--- Comment #1 from Nick Kew <ni...@webthing.com> 2008-10-14 06:57:18 PST ---
It's not our business to invent protocols, so this doesn't belong on bugzilla.
It is our business to *implement* protocols. And because of that, we may have
an interest in developing those protocols. But that's a separate issue.
A legitimate bugzilla entry on the subject might be a feature request to
implement some RFC - which you should mention in your report.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org