Re: [Snort-sigs] secure connection to bleedingsnort.com

That's a good idea. We didn't originally because the only cert 
immediately available is a wildcard for  *.infotex.com. The project is 
on one of our servers, but the effort is certainly community-wide, so we 
didn't feel that appropriate.

However, we could just put the cert on snort.infotex.com and people 
could just use that for rule downloads. That way there won't be script 
issues with mis-matched certs.

Or if anyone has the resources to donate a cert for bleedingsnort.com 
we'd be more than happy to use it. :)

I'll go ahead and do the infotex cert though, if there aren't any 
objections.

Matt

John Nagro wrote:

> This is just a thought, but it would be nice to have https access to
> bleedingsnort.com as to prevent legit rule-file download from setting
> off snort alerts. Doesnt have to be a real cert, could be self-signed
> or better yet cacert.org offers free ones.
>
> thoughts? ideas?
>
> -John
>
>  



-------------------------------------------------------
This SF.Net email is sponsored by: thawte's Crypto Challenge Vl
Crack the code and win a Sony DCRHC40 MiniDV Digital Handycam
Camcorder. More prizes in the weekly Lunch Hour Challenge.
Sign up NOW http://ad.doubleclick.net/clk;10740251;10262165;m
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs