idp on port 80 only ?

Cantor, Scott cantor.2 at osu.edu
Thu Apr 18 13:13:00 EDT 2013


On 4/18/13 1:07 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:

>Is it reasonable to run an idp on port 80 only and not 443 ?
>
>Maybe endpoints like https://idp.example.org:80/...
>
>I was thinking about clustering and the cloud, and it looks like most
>cloud providers charge extra for https, since virtualizing it is
>apparently non-trivial, and I was wondering if the idp could provide
>communication security over port 80.

Possible, yes, reasonable, probably not so much, it's the sort of thing
people frown on. It's why the whole separate port thing for TLS was kind
of viewed as a mistake vs. using startTLS.

-- Scott




More information about the dev mailing list