SSL (contd)
IETF standard = TLS: transport layer security
LDAP combined with X.509 certificates, presented through SSL can achieve single “sign-on” access like Kerberos
Problem: firewalls cant peek in (no “escrow”)
- Need proxy server terminates SSL sessions at the firewall and no SSL within enterprise.
- => client authentication cannot be done (proxy server can’t have client’s private key)