Re: [Gnumed-devel] Hosting an encrypted pythonic simplehttp GNUmed server

[Karsten Hilbert]

On Sun, Aug 01, 2010 at 12:18:54AM -0700, Jim Busser wrote:

> Also BTW begs a question about the wxPython GNUmed client connecting across 
> the internet...
>       --> what provides its encryption, or --- if it is unencrypted --- what 
> would be the recommendation?

The recommendation is:

a) only allow from any untrusted client SSL connections to
   the PostgreSQL database (this is done inside pg_hba.conf on
   the server)

b) on top of that desire to tunnel the above traffic over ssh

> on the wiki, there is
>       
> http://wiki.gnumed.de/bin/view/Gnumed/DebianKerberosLDAPBindGnumedWalkthrough
> 
> ... but would kerberos be usual and standard for this scenario?

That is only for authentication, I believe. It doesn't add
on-the-wire encryption AFAIK.

Karsten
-- 
GPG key ID E4071346 @ wwwkeys.pgp.net
E167 67FD A291 2BEA 73BD  4537 78B9 A9F9 E407 1346