[horde] switching from https to http using imp?

Hugo Bouckaert hugo at geoinformex.com
Mon Mar 10 10:03:31 PST 2003


Hi

I have installed horde 2.2 with imp 3.2 and turba 1.1 on my linux 
webserver running apache 1.3.27. It runs fine, but I am channeling 
everything through https, as, in order to receive emails with imp using 
imap, people have to supply a username and password. Not using https 
would be very insecure.

The trouble is that once I am switching to https, encryption of all 
subsequent pages makes using the web mail service very slow. As far as I 
can see, there is not absolute need to keep using https once the person 
has been verified by horde and imp and the mail folder is parsed through 
to the web interface.

Is it possible to switch back to http between the person logging into 
imp and the messages being displayed in the inbox? In other words, 
entering a username and password to horde and imp to verify the account 
with the mail server is done using https, but the page that is returned 
i.e. inbox with mail messages switches back to http. From then on, all 
further pages (such as composing a message etc.) are http, not https.

Is this possible? Are there any security considerations to watch out for 
apart from mail itself not being encrypted? If it can be done, how would 
this switching between https and http be implemented in the php code?

Any help or advice will be most appreciated. If there are other 
suggestions about ways of making the imp web mail service less slow, 
that would be greatly appreciated as well. 

Thanks

Hugo

-- 
Dr Hugo Bouckaert
Systems and Programming Engineer 

GeoInformatics Exploration Australia P/L
57 Havelock St
West Perth, WA 6005
PO Box 1675, West Perth 6872

Ph:       61 08 9420 7400 
Fax:      61 08 9226 1299 

www.geoinformex.com

------------------------------------------------------------------------
This email and any attachments may be confidential or legally privileged. If you received this message in error or are not the intended recipient, you should destroy the e-mail message and any attachments or copies, and you are prohibited from retaining, distributing, disclosing or using any information contained herein. Please inform us of the erroneous delivery by return e-mail. Thank you for your cooperation.
 




More information about the horde mailing list