LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 03-03-2017, 01:14 PM   #1
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
HTTPS site to host keys?


I's like to make more use of encrypted communication but, as usual, implementation across platforms may cause issues.
To this end I would like, perhaps, to purchase a public key and use a website secured by it to serve my keys.
Is that a solved problem?
 
Old 03-03-2017, 06:39 PM   #2
Sefyir
Member
 
Registered: Mar 2015
Distribution: Linux Mint
Posts: 634

Rep: Reputation: 316Reputation: 316Reputation: 316Reputation: 316
Host your own keyserver?

https://keyserver.mattrude.com/guides/building-server/
 
Old 03-03-2017, 06:50 PM   #3
jefro
Moderator
 
Registered: Mar 2008
Posts: 21,980

Rep: Reputation: 3624Reputation: 3624Reputation: 3624Reputation: 3624Reputation: 3624Reputation: 3624Reputation: 3624Reputation: 3624Reputation: 3624Reputation: 3624Reputation: 3624
Kind of depends. You could buy a cert or you might be able to make a self signed certificate that you carry with you on a flash drive.

Not totally sure what exactly you want to do with https but I assume you have your own server up.
 
Old 03-04-2017, 05:09 AM   #4
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Original Poster
Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
Quote:
Originally Posted by Sefyir View Post
I'd not considered that, tjhanks, might be worth a look.
Quote:
Originally Posted by jefro View Post
Kind of depends. You could buy a cert or you might be able to make a self signed certificate that you carry with you on a flash drive.

Not totally sure what exactly you want to do with https but I assume you have your own server up.
As it stands I have webspace on two domains but that is with a hosting service so I only have limited access. My thought process is that if I were to make one of them HTTPS then I could simply host my public key on that site and it would be relatively safe to assume that anybody picking it up had the correct key. Without HTTPS I envisage an automated main-in-the-middle attack could mean that the wrong key is given out. I'm not about to make myself a tinfoil hat but I'd like to be able to give my public key to people with a little assurance that it is my public key. It's the flash drive option I'm trying to replace for people I don't see face-to-face.
 
Old 03-04-2017, 08:48 AM   #5
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,659
Blog Entries: 4

Rep: Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941
You would also have to use SSL certificate-based authentication options so that the server would check for a particular client-side key being presented. It can be done with Apache etc if you wish. ("https" cuts both ways ...)
 
Old 03-06-2017, 11:53 AM   #6
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Original Poster
Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
Quote:
Originally Posted by sundialsvcs View Post
You would also have to use SSL certificate-based authentication options so that the server would check for a particular client-side key being presented. It can be done with Apache etc if you wish. ("https" cuts both ways ...)
Ah, yes, so if I give my public key out that's fine but I have no way of confirming the public keys others give me are genuine.
I'm beginning to wonder whether any of this is worth it. This is, in fact, one of the main reasons I don't use encrypted email on a dailey basis -- it's easier to assume all email is read and all is lies and to work around that.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
https virtual host (works only for one site) kirthanshetty Linux - Server 4 09-08-2014 08:49 AM
https site not opening satish Linux - Networking 5 12-30-2010 03:10 PM
ssl_error_handshake_failure_alert on https site - localhost konzo Linux - Server 6 09-06-2010 05:21 AM
speed up https (apache) site peridot121 Linux - Server 3 05-18-2010 04:51 PM
ie7 can't view my site over https tuxgirl Linux - Server 3 07-24-2009 01:52 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:55 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration