Re: HTTP and Web server configuration and security.

Thanks Nathan.

On Wed, Dec 2, 2020 at 6:00 PM Nathan Andelin <[email protected]> wrote:

> HTTPS and VPN both provide transport-layer encryption. In that regard, I
> don't see HTTPS offering additional value over VPN encryption.
>
> However, a number of shops prefer HTTPS rather than a VPN because they'd
> rather not manage VPN credentials, or mess with VPN client downloads,
> support, and network issues entailed in managing VPNs. Shops get tired of
> the network device and configuration requirements of VPNs, which can be
> especially burdensome for shops that have a large or potentially large
> number of users.
>
> A number of shops prefer to manage user authority within IBM i or IBM i
> applications rather than additionally within a VPN. I see initiatives to
> downsize VPN use in favor of HTTPS.
>
>
>
>
>
> On Wed, Dec 2, 2020 at 6:18 AM Robert Rogerson <[email protected]>
> wrote:
>
> > I was able to create an HTTP and web services servers from the wizard.  I
> > then created an api.  I was able to test it with Postman and everything
> > checked out.
> >
> > The next thing I'm unsure of is security.
> >
> > I created a new user with *USER authority and no special authority  I
> also
> > changed the initial menu to signoff.
> > I redeployed the web service speciying this user profile on User ID for
> > this service.
> > I retested with Postman and it still works.
> >
> > I ended my vpn.  The api now timed out in Postman.
> >
> > So my question is, if the api is only ever called from behind the vpn is
> > there still a big hole I'm missing?
> > Is SSL required if behind a vpn?
> >
> > Once again, your advice is very much appreciated.
> >
> > Thanks, Rob
> > --
> > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> > list
> > To post a message email: [email protected]
> > To subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/web400
> > or email: [email protected]
> > Before posting, please take a moment to review the archives
> > at https://archive.midrange.com/web400.
> >
> >
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
>
>
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.