Understanding SSL

[motoman]

I know what it stands for and I know it's one of the most secure ways to set up a connection but I have several questions about it. Do you set it up on the hardware level on a router/modem or do you set it up on a software level for each application?

[roliath]

Self signed or purchased? You set it up in IIS if your on windows (software).

[motoman]

What's easier to setup, self signed certificate or a purchased certificate? Since it's set up on the software side, do you have to set it up for each individual application (internet, torrents, news groups, etc) or do you just set it up once for your overall connection?

[Silverback]

pretty much each website/application with a FQDN needs it's own SSL Certificate

It's setup on the WebServer Hosting the website/application

Self signed works well if you don't mind seeing the Untrusted warning, but you can manually install your self signed cert on any computer that needs it, and you won't get the warning page.

What are you using it for? What are you trying to host that requires SSL?

[roliath]

I don't much about torrents with ssl encryption, but self signed are easy to set up and add in unix,
Only takes a few commands, once you generate the cert, you copy it to apache/conf, than configure your vhost to use it. restart apache and bam your done. ssl certs from verisign and the likes are expensive and start around 500+. and with them you just fill out a form.

[motoman]

pretty much each website/application with a FQDN needs it's own SSL Certificate

It's setup on the WebServer Hosting the website/application

Self signed works well if you don't mind seeing the Untrusted warning, but you can manually install your self signed cert on any computer that needs it, and you won't get the warning page.

What are you using it for? What are you trying to host that requires SSL?

My plan was to start using news groups again for downloads. I'll most likely go through astraweb as the hosting service and use grabit for the search. A co-worker and I were talking about it and he highly recommended setting up a SSL connection. I'm just not too familiar with how you go about setting them up.

I've also thought about building a small home server to throw my music, movies, etc, on and wondered if I could even set it up with SSL to make it more secure.

[Silverback]

My plan was to start using news groups again for downloads. I'll most likely go through astraweb as the hosting service and use grabit for the search. A co-worker and I were talking about it and he highly recommended setting up a SSL connection. I'm just not too familiar with how you go about setting them up.

I've also thought about building a small home server to throw my music, movies, etc, on and wondered if I could even set it up with SSL to make it more secure.

Hmm, no experience here with newsgroup downloads, I just use torrents, and a good anti-virus.

As for a home server, I'm running Windows Home Server 2011 right now, and the software sets up an SSL cert for you, when you register you an .homeserver.com host with Microsoft and configure your home server to use it.

It's pretty nice, streaming music and movies from my server, as well as a console to Remote Desktop and wake on lan any of the computers on my network that have the client installed on them. I also use it to host all of my documents so that I can get to them from any computer, works great for doing school work on the go, then uploading it back to my homeserver to work on later.

[motoman]

Hmm, no experience here with newsgroup downloads, I just use torrents, and a good anti-virus.

Do you use anything to block your connection from being seen? i never could get Peer Guardian working with Win 7.

As for a home server, I'm running Windows Home Server 2011 right now, and the software sets up an SSL cert for you, when you register you an .homeserver.com host with Microsoft and configure your home server to use it.

Right on, I'll definitely look into that. I wasn't sure of Home Server was worth a shit.

It's pretty nice, streaming music and movies from my server. I also use it to host all of my documents so that I can get to them from any computer, works great for doing school work on the go, then uploading it back to my homeserver to work on later.

That's mainly what I'm wanting to use mine for.

[Silverback]

Do you use anything to block your connection from being seen? i never could get Peer Guardian working with Win 7.

Right on, I'll definitely look into that. I wasn't sure of Home Server was worth a shit.

That's mainly what I'm wanting to use mine for.

I'm behind a router, and use Windows firewall.

The only inbound connections I allow are port specific.

[motoman]

I'm behind a router, and use Windows firewall.

The only inbound connections I allow are port specific.

I guess I need to get away from the shitty Time Warner cable router I'm currently using. I'm guessing my connection can be seen in some way or another because a few months back I got a notice from TWC saying that they received word someone from my IP addy had downloaded a movie. I'm using demonoid and typically just download from the demonoid trackers, which I thought were secure trackers. I just want to make sure my connection is secure as much as it can be.

[roliath]

motoman, get with a private tracker and any dmca complaints against your ip should go away.

[mustang_revival]

I guess I need to get away from the shitty Time Warner cable router I'm currently using. I'm guessing my connection can be seen in some way or another because a few months back I got a notice from TWC saying that they received word someone from my IP addy had downloaded a movie. I'm using demonoid and typically just download from the demonoid trackers, which I thought were secure trackers. I just want to make sure my connection is secure as much as it can be.

If they give you shit just tell them you run an open WIFI signal at your place and people have been stealing your bandwidth.

[Silverback]

Just send a response letter and say... But I thought everything on the internet was legal, if it's not, why do you let me go to those sites?

[Silverback]

Buddy of mine at work says he uses peerblock before running his torrent manager and has never had a problem.

I don't use anything, and I've never gotten a letter, in fact I just downloaded 100GB of content from thepiratebay this weekend.

[motoman]

Buddy of mine at work says he uses peerblock before running his torrent manager and has never had a problem.

I don't use anything, and I've never gotten a letter, in fact I just downloaded 100GB of content from thepiratebay this weekend.

Hmm, makes me wonder if it's just how my router/firewall is set up. Have you tuned one or both to your liking? Or do you just use the plain jane windows firewall?