Subject | Re: [firebird-support] Firebird 3 Wire compression encrypt basic setup ? |
---|---|
Author | Mark Rotteveel |
Post date | 2018-05-16T19:46:46Z |
On 2018-05-16 21:07, Issam Boughanmi amigoface@...
[firebird-support] wrote:
cryptography and security world, has multiple implementations, and is
actively maintained. That is more likely to be kept secure and working
than something that is no longer actively maintained. It is also more
likely to find information to configure and set it up.
Firebird doesn't provide it. SSL stands for secure socket layer, and
these days more an alias for TLS (transport layer security), and that is
a standard and widely used way of encrypting (and optionally
authenticating server and sometimes client) over a socket connection (it
is - for example - used for HTTPS). It is what IMHO Firebird should have
used instead of rolling its own encryption layer, but that ship has
sailed.
Mark
[firebird-support] wrote:
> hi Mark, thanks for the great answer :)SSH is standard, widely used and scrutinized by people in the
>
> ok let's forget Fb3 wire thing ...
> like i said i have already a working zebedee setup, now what is the
> main benefit for using ssh instead apart that zebedee development is
> stopped in 2005 :p ?
cryptography and security world, has multiple implementations, and is
actively maintained. That is more likely to be kept secure and working
than something that is no longer actively maintained. It is also more
likely to find information to configure and set it up.
> ps : in the firebird faq there is a mention about ssl too , what isI'm not sure in what context the Firebird FAQ talks about SSL, but
> the difference about all these acronyms in our context (ssh, ssl ,
> ...)?
Firebird doesn't provide it. SSL stands for secure socket layer, and
these days more an alias for TLS (transport layer security), and that is
a standard and widely used way of encrypting (and optionally
authenticating server and sometimes client) over a socket connection (it
is - for example - used for HTTPS). It is what IMHO Firebird should have
used instead of rolling its own encryption layer, but that ship has
sailed.
Mark