File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
http://aspose.com/file-tools
The moose likes General Computing and the fly likes If Website available only on Company Network and SSL-VPN, is SSL needed for website? Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Engineering » General Computing
Bookmark "If Website available only on Company Network and SSL-VPN, is SSL needed for website?" Watch "If Website available only on Company Network and SSL-VPN, is SSL needed for website?" New topic
Author

If Website available only on Company Network and SSL-VPN, is SSL needed for website?

Dan Bizman
Ranch Hand

Joined: Feb 25, 2003
Posts: 387
If I have a website that is available only internally over a company network (and of course over an SSL-VPN as that enables accessing network resources), is HTTPS (SSL) needed? Is it redundant/useless/pontless?

Is it that with the above only internal "ears" can listen to the conversation anyways, so SSL isn't needed and simply slows the app down? Or is it still needed for security when used from VPN?
[ November 07, 2005: Message edited by: Dan Bizman ]
Ernest Friedman-Hill
author and iconoclast
Marshal

Joined: Jul 08, 2003
Posts: 24187
    
  34

Let's move this to "General Computing", as it's not a Java topic.


[Jess in Action][AskingGoodQuestions]
Randall Twede
Ranch Hand

Joined: Oct 21, 2000
Posts: 4347
    
    2

i wouldnt call myself an expert, but if i was you i would ask myself a few questions:
how sensitive is the information on the site?
could anyone or the company get hurt financially?

from what i know ssl is mainly to protect people from getting thier credit card info stolen. i tried to set up apache for ssl once just for the learning and i gave up because it was rather complicated.
[ November 11, 2005: Message edited by: Randall Twede ]

SCJP
Visit my download page
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: If Website available only on Company Network and SSL-VPN, is SSL needed for website?