Securing OpenStack Client Connections Part 1
December 18, 2012 at 12:12 PM | categories: openstack, devstack
We all know that the difference between https and http is the addition of encryption, right? Of course, but less attention is paid to the other purposes of SSL and TLS: to verify one or both of the parties involved in the connection and to validate that the objects used in the verification meet certain criteria. [1] In the common case of a user directing a web browser to a 'secure' site, only one side is potentially validated, that being the server. Maybe. Browsers generally go a good job of performing server certificate verification and validation but other https clients