|
Title: to ssl or not? Post by: gilvago on June 20, 2008, 04:29:29 AM Apologies for what is probably a naive question but... if I'm transmitting an encrypted file should I still use SSL? I'm assuming the transfer will be quicker if I don't use SSL - but does that then mean my s3 id and access key will be sent in plain text?
Title: Re: to ssl or not? Post by: ferrix on June 20, 2008, 07:37:51 PM but does that then mean my s3 id and access key will be sent in plain text? No S3 is designed to always protect your secret key. SSL is only for securing the contents of the nodes in-flight from eavesdropping. Title: Re: to ssl or not? Post by: gilvago on June 21, 2008, 12:54:00 PM Thanks ferrix
Title: Re: to ssl or not? Post by: lejarrag on July 28, 2008, 01:43:43 PM SSL will also authenticate the AWS server, i.e., check that the server you are connected to effectively is the Amazon server. On the other hand, even banks sites do not routinely authenticate themselves, even though they use SSL to encrypt transactions. This, at least, is what I understand.
|