openldap: SASL and/or TLS?

Timothy Murphy tim at birdsnest.maths.tcd.ie
Fri Dec 7 19:22:40 UTC 2007


Tim wrote:

>> it seems to me that encryption necessarily involves,
>> or requires, authentication.
> 
> Generically, no...  It just means the traffic is encrypted, whatever it
> is.  e.g. I can look at bugzilla using a HTTPS connection, but I haven't
> logged in, so it doesn't know who I am.  That's encryption without
> authentication.
> 
> But if you, then, authenticate in some way through that encrypted
> connection, you get both.  i.e. You log on.

Yes, I was being silly -
I was thinking, there is no point in encrypting data
if you tell everyone how to decrypt it.
But I suppose there is a point to that -
namely, ensuring that the data is kosher.







More information about the fedora-list mailing list