This is my first time posting my blog from mobile using an iPhone. Nice to used. I can blogging everywhere and everythink I want.
Let's assume that you have an Apache webserver and a website that you want VERY finite access controls on. You could do it a number of ways, right? You could craft a clever login page and use cookies, session IDs, etc. You could use a simple authentication method like .htaccess. Or, you could create a custom SSL certificate and give that certificate to very specific users that should have access to your site. In a perfect world, only these users could communicate with your site AND the connection would be secured via the magic of SSL. I know what you're thinking. "But Chief, what if someone STEALS your certificate?" Hey, what if someone steals your car keys? :-) I have always wanted a good how-to document on doing this, and reader 'Null' (who I must also point out is a heck of a nice guy, and a fun sort to hang out at Def Con with) came through big time. Without further ado, here is Null's write-up on the subject. Enjoy! ~ Chief Reader 'Null' write...
Comments
Post a Comment