Koozali.org: home of the SME Server

webmail and horde

Guillermo

webmail and horde
« on: September 06, 2002, 06:43:09 AM »
I've recently upgrade to v. 5.5 from 5.1.2. and the server manager seems to be much slower than previous, but there is one thing I don't understand. If in manager I do enable secure HTTPS for webmail it works, but if instead of pointing

https://myserver/webmail
is
http://myserver/horde

all that wonderfull paranoia on security vanishes as I'm able to get in throught simple and plain http.
Does anybody know how to fix this?
Thanks

Guillermo

schotty

Re: webmail and horde
« Reply #1 on: September 06, 2002, 05:43:12 PM »
Just because you enable https does not mean that http does not work. It means that you now have a secure and "insecure" way of using the server-manger.

In your case it would be adviseable to enable https and that you use it!!! You do not have to use http !!!!! Just forget about it.....

Guillermo

Re: webmail and horde
« Reply #2 on: September 07, 2002, 08:02:01 AM »
Yes, but I've sent a bug report to mitel and they have raised an
internal bug report on this because as server-manager says the
admin wants to "ALLOW HTTPS ONLY (for security reasons)"
and to ALLOW http access wen you don't want, can be considered just a plain security hole.
Think that if you force all your system users to use https on webmail you are taking care of them as well as the system itself.

Thanks for replying Schotty
Good luck