Re: SSL and iSeries as a consumer of a web service on a PC workstation -- MIDRANGE-L

Subject: Re: SSL and iSeries as a consumer of a web service on a PC workstation
From: Lukas Beeler <lukas.beeler@xxxxxxxxxxxxxxxx>
Date: Fri, 23 Apr 2010 20:29:39 +0200
List-archive: <http://archive.midrange.com/midrange-l>
List-help: <mailto:midrange-l-request@midrange.com?subject=help>
List-id: Midrange Systems Technical Discussion <midrange-l.midrange.com>
List-post: <mailto:midrange-l@midrange.com>
List-subscribe: <http://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@midrange.com?subject=subscribe>
List-unsubscribe: <http://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@midrange.com?subject=unsubscribe>

On Fri, Apr 23, 2010 at 20:01, Scott Klement
<midrange-l@xxxxxxxxxxxxxxxx> wrote:

In a browser, I'd agree with you. ÂBut that's going to be specific to
the software... Âchecking the domain name against the CN in the
certificate is not done in the SSL APIs, and therefore doesn't apply to
all SSL circumstances.

If you don't check the certificate, why use SSL at all?
Anyone will still be able to easily and trivially do a MITM attack.

As an Amazon Associate we earn from qualifying purchases.

Follow-Ups:

Re: SSL and iSeries as a consumer of a web service on a PC workstation , Scott Klement

This mailing list archive is Copyright 1997-2025 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.