[dba-Tech] SSL or SSH or Other?

Salakhetdinov Shamil mcp2004 at mail.ru
Mon Jul 22 15:17:29 CDT 2013


 Hi Jim --

"Watch What You Say"! :) (see below)

>  in the age of PRISM this becomes so very important
It (VPN encryption) might soon become useless:

"The NSA Is Building the Country’s Biggest Spy Center (Watch What You Say)"
http://www.wired.com/threatlevel/2012/03/ff_nsadatacenter/all/1 -- Shamil

Monday, July 22, 2013 11:28 AM -06:00 from Jim Lawrence <accessd at shaw.ca>:
>Hi Arthur:
>
>I am hardly an network expert but for secure connection across internet I would suggest a VPN type network. If done properly, staff with the appropriate usernames and passwords can connect in to business network through either standard or a specific dedicated address:port installed on the company's router. 
>
>There are a slew of VPN products out there with all sort of features and costs. I have one that is installed on my laptop which gives me full access to my entire network when I am on the road...it supports any protocol as its is only a tunnel, even RDP. 
>
>It is called OpenVPN ( http://openvpn.net/ ) and as my resource are limited the price is right. The product has clients for any OS but server end must be Linux based...not a problem for yourself as it runs fine on any version of Distro, that uses Debian. If the business wants their server end hosted it will cost $6.00 per connection per year (I am sure there are volume discounts). 
>
>I would recommend you set up your own in-house server as once setup properly it can left to its own devices as it just works. The beauty of hosting is that once a connection is established the client and server are directly linked, no third party intervention is needed. This is of course is great for security and in the age of PRISM this becomes so very important. 
>
>HTH
>Jim
<<< skipped >>>


More information about the dba-Tech mailing list