>I'm trying to host ssl site on my apache httpd, now the big question
>is .. should I use apache-ssl or mod-ssl?
>what is better for security? and why apache has got two derivatives
>.... ? is that apache-ssl for a complete replacemant of apache httpd?
>or the mod-ssl can be used with any apache 1.3 httpd? Who provides the
>128 bit encription?
First there was only Apache-SSL to provide SSL functionality for Apache.
It comprised of a largish patch doing changes "all over" Apache base
Apparently this approach was considered a design fault, as a competing
approach, mod_ssl, appeared. Mod_ssl, as the name implies, is built as
an add-on module for Apache, and thus integrates in a more elegant way
into the Apache core.
I don't know how the two compare; I wouldn't believe in major
differences in product security or performance, but then, if you're
interested, please do proper testing and report your findings to the
rest of us.
Wolf a.k.a. Juha Laiho Espoo, Finland
PS(+) PE Y+ PGP(+) t- 5 !X R !tv b+ !DI D G e+ h---- r+++ y++++
"...cancel my subscription to the resurrection!" (Jim Morrison)