Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.python > #108958
| From | Random832 <random832@fastmail.com> |
|---|---|
| Newsgroups | comp.lang.python |
| Subject | Re: OT: limit number of connections from browser to my server? |
| Date | 2016-05-22 15:04 -0400 |
| Message-ID | <mailman.5.1463943862.20402.python-list@python.org> (permalink) |
| References | (3 earlier) <nhemfs$foq$1@ger.gmane.org> <nhf9oq$cel$3@ger.gmane.org> <mailman.62.1463495707.19823.python-list@python.org> <dq4adbFhac8U1@mid.individual.net> <1463943853.1843750.615287929.64BA8A0B@webmail.messagingengine.com> |
On Wed, May 18, 2016, at 18:58, Gregory Ewing wrote: > Grant Edwards wrote: > > Product spec explicitly states HTTPS only. I'm told that is not open > > for discussion. The customer is a large, somewhat bureaucratic German > > corporation, and they generally mean it when they say something is > > non-negotiable. > > They're probably being sensible. The way the Internet of > Things is shaping up, it's far better to have too much > security than too little. HTTPS provides little to no security on a device which has no domain name, since we don't have any well-established way to manage self-signed certificates, or certificates signed on a basis other than the domain name. It'd be nice if there were a way for IOT devices to have a certificate signed *by the manufacturer*. The entire SSL browser UI paradigm is predicated on the fact that what is verified by a certificate is the domain name, which must match the CN field of the certificate, and provides no way to present a certificate issued on another basis to the user.
Back to comp.lang.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Re: OT: limit number of connections from browser to my server? Grant Edwards <grant.b.edwards@gmail.com> - 2016-05-17 14:27 +0000
Re: OT: limit number of connections from browser to my server? Gregory Ewing <greg.ewing@canterbury.ac.nz> - 2016-05-19 10:58 +1200
Re: OT: limit number of connections from browser to my server? Random832 <random832@fastmail.com> - 2016-05-22 15:04 -0400
Re: OT: limit number of connections from browser to my server? Grant Edwards <grant.b.edwards@gmail.com> - 2016-05-22 19:29 +0000
csiph-web