perfsonar-dev - Re: Security considerations in perfSONAR
Subject: perfsonar development work
List archive
- From: Nicolas Simar <>
- To: Nina Jeliazkova <>
- Cc: Cándido Rodríguez Montes <>, Roman Lapacz <>, schmitz <>, Loukik Kudarimoti <>, "" <>
- Subject: Re: Security considerations in perfSONAR
- Date: Tue, 03 Jun 2008 09:00:21 +0100
Hi,
few question about this.
1) What is the benefit of going for https in our case?
2) If https was to be turned on instead of http: what are changes the developer should bring to their products (web-services or visualisations)? Would those changes break the backward compatibility?
3) What would have to do a deployer (someone who has already deployed the web-services)?
Thanks a lot for helping here.
Best regards,
Nicolas
Nina Jeliazkova wrote:
Hi Candido,
The client, directly communicating with the web service (e.g. perfsonarUI) will need to use certificates or user credentials, in order to use the secure connection. Will these will be different from GIdP authentication? If using certificates, could you clarify the procedure to issuing certificates and ensuring each perfsonarUI user have a valid one?
Best regards,
Nina
Nicolas Simar wrote:
Hi Roman, Nina and David,
Cándido Rodríguez Montes wrote:
Hi Nicolas and Loukik,
as perfSONAR MDM 3.0 is going to be installed by european NRENs, I would like to know if they are/will be deploy their services over http or https.
Https is not a requirement for the authN process but it is helpful for replying attacks, even the authN hasn't been part of perfSONAR!
what would be the impact on the
1) the web-service development if we were to use https (none?)
2) on the visualisation (the way they access the web-service).?
So, in case perfSONAR services are reached by http, we should ask them to move it to https.
Thanks a lot.
Nicolas
Regards
--
Cándido Rodríguez Montes E-mail: <mailto:>
Middleware warrior Tel:+34 955 05 66 13
Red.ES/RedIRIS
Edificio CICA
Avenida Reina Mercedes, s/n
41012 Sevilla
SPAIN
--
Nicolas
______________________________________________________________________
Nicolas Simar
Network Engineer
DANTE - www.dante.net
Tel - BE: +32 (0) 4 366 93 49
Tel - UK: +44 (0)1223 371 300
Mobile: +44 (0) 7740 176 883
City House, 126-130 Hills Road
Cambridge CB2 1PQ
UK
_____________________________________________________________________
- Re: Security considerations in perfSONAR, Nicolas Simar, 06/03/2008
- Re: [pS-dev] Re: Security considerations in perfSONAR, Cándido Rodríguez Montes, 06/04/2008
Archive powered by MHonArc 2.6.16.