Re: E2K3 OWA and secure logins

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Nick Cavalancia (nickc_at_remove-comsphere.com)
Date: 02/21/04 

Date: Sat, 21 Feb 2004 06:48:04 -0500

Basic Auth is clear text, so an SSL cert is always the best solution. You
can use a Certificate Server (assuming you have W2K or better) internally to
generate the SSL cert. WHat are you running? 

-- 
Nick Cavalancia
MCSE/MCT/MCNE/MCNI
nickc@remove-comsphere.com
Comsphere - "Where Knowledge Transfer is Key"
Web: http://www.comsphere.com
Ph: 954.275.0114
Fax: 954.791.6763
"Enchantnet" <gil.guzman@enchantnet.com> wrote in message
news:142b101c3f82d$72961100$a401280a@phx.gbl...
> I realize OWA comes fully configured right out the box in
> Exchange 2003 and ready to use.  I'm confused about
> recent postings in this newsgroup and KB articles about
> secure logins while logging into OWA over the internet.
> My question is, are the logins secure when a user enters
> their domain username and password or are these being
> broadcast in clear text?  If they are, why would
> Microsoft do this?  From what I've read, creating a SSL
> session for OWA is confusing and requires proper planning.
>
> Thanks to all.

Relevant Pages

  • Re: OWA over SSL
    ... SSL cert from the likes of thawte, ... internal server will not work on the internet. ... SSL in OWA. ...
    (microsoft.public.exchange.clients)
  • Re: Error 80072f17
    ... Certifcation Authority." ... OWA is secured with an SSL Cert. ... OWA works fine from all computers. ... Microsoft MVP - Mobile Devices ...
    (microsoft.public.pocketpc.activesync)
  • Re: OWA Gives HTTP Error 404, BUT when connecting to /public first, its ok???
    ... I'm I missing something completely blatant? ... setup. ... The SSL Cert recently expired and an engineer renewed it and ... Since then, OWA hasn't work. ...
    (microsoft.public.exchange2000.admin)
  • Re: Error 80072f17
    ... OWA is secured with an SSL Cert. ... on the PDA. ... OWA works fine from all computers. ... Microsoft MVP - Mobile Devices ...
    (microsoft.public.pocketpc.activesync)
  • OWA access with netBIOS and FQDN questions
    ... We have an Exchange 2003 server running on Server 2003 Standard with OWA ... We also have an SSL cert for Exchange pointing to ...
    (microsoft.public.exchange.admin)