Setting up a Secure Web Server and Clients on an Intranet

This paper discusses the practical issues that arise when securing the access to the World Wide Web (WWW). A brief overview of the different protocols that are proposed to secure the WWW is given and the current status of the U.S. export regulations is reviewed. An attack on SSL 2.0 is detailed which exploits some of the weaknesses in this protocol. The setup of a secure server with access control is explained. At the client side, existing solutions to provide export browsers with strong cryptography are evaluated, and we also introduce some improvements. Finally, the performance of the secure system is evaluated and compared to that of the regular http connection.

• Type: Conference
• Year: 1998
• Where: WETICE
• Authors: Joris Claessens, Mark Vandenwauver, Bart Preneel, Joos Vandewalle
• Keywords: Emerging Technology, Export Regulations, Regular Http Connection, WETICE 1998, World Wide Web