Monday, 2012-03-12

*** nowen (~nowen@adsl-98-66-180-154.asm.bellsouth.net) has joined #wikid12:34
nowenmorning everyone12:58
joevanoso what is the thought on where to deploy the WiKID server? in the DMZ?16:05
nowenjoevano: a lot of people do that.  Some put a proxy in the dmz and forward request to WiKID on the inside16:06
nowenyou can NAT the server, just use the external ip for the domain identifier16:06
joevanothat makes sense...16:07
eugohi20:16
nowenhi20:16
eugoWith the community version, when configuring the server you create a intermediate CA which you sign with the WiKID server and is used for licencing purposes. Is the server not free?20:29
eugoCan I sign with my own CA?20:29
nowenthe server is free, we include the ca for ease of use and to help keep things secure20:30
nowenyou can probably use your own, I have never tested that20:30
eugoI only suggest this in the context of being free of third parties.20:31
nowenI see20:31
eugoI don't know a great deal about certificates at any rate. It's rather complicated20:32
nowenyeah, that's why we included it :)20:32
eugoin the video you say that it's only used to get people started faster (the popup where you paste your generated cert)20:33
eugoso i guess that answered my question20:33
nowenhmm, I don't remember that. I'd have to re-watch it20:34
eugopart 2, 01:0520:35
eugoIs the "pin" the only password you send to the wikid server? I know wikid is a two factor authentication, so it adds another password to your login. What i'm getting at is; can't the pin be brute-forced just as well as the password?20:38
eugoI read about it on the website and I misunderstood the whole concept. I understand it better now20:55
nowensorry - stepped away20:55
nowenthe two factors are knowledge of the pin and possession of the (secret key embedded in the (software token20:56
eugoYes I see20:57
nowenI have to check out. I'll be back tomorrow21:39
eugoOk thanks bye21:40
nowenlater21:40
*** nowen has quit (Quit: Leaving.)21:40

Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!