support.kayako.com on SSL

craigbrass · **support.kayako.com on SSL -** 26-08-2007, 04:37 PM

I think Kayako's support domain should be put on SSL so that if you submit FTP details, etc they are secure.

supportskins · 26-08-2007, 06:50 PM

I second this!

**Jamie Edwards** · 26-08-2007, 07:01 PM

This is a good idea in principal, and something we should look to implement. However, when you connect to your FTP server using the same information do you do it via an SSL connection?

craigbrass · 26-08-2007, 07:24 PM

I don't usually faf about with individual standard FTP accounts. I always use Secure FTP over SSH where I can tbh (generally to the root of the server too as it saves time).

You do however make a good point. It does however stop one of the two points of interception of the information.

grahame · 04-09-2007, 09:39 AM

Greetings,

Did anything happen about this?

FTP is the focus of a lot of hacker attention. It and non-secured HTTP are very easy to snoop and we have experience that it does happen.

I'm not paranoid, they really are out to get me!

craigbrass · 04-09-2007, 09:41 AM

Don't think anything further has happened. I really think it needs done ASAP tho.

**Jamie Edwards** · 04-09-2007, 09:50 AM

If we are going to implement it, it will take some time for us to do so should not be expected quickly.

grahame · 04-09-2007, 11:37 AM

Fair enough. But presuming that using SFTP from your end is not the problem can there be some well understood out of band method of sending passwords?

Pgp mail? Text message?

Phone isn't really satisfactory both on cost and phone-tennis grounds!

Sorry to make such an issue about this, but unencrypted access to a central facility through the ethernet shark pool is scary.

craigbrass · 04-09-2007, 12:15 PM

Isn't it just a case of getting an SSL cert, installing it then forcing SSL redirection on the subdomain?

**Jamie Edwards** · 04-09-2007, 12:57 PM

It isn't, we have a complicated integration between the support desk and member's area which will need revising if we were to put SSL on the member's area.

craigbrass · 04-09-2007, 12:58 PM

Oh yea, forgot about that.

**Digital Mayhem** · 04-09-2007, 11:10 PM

well I suggested this to varun over a year ago so something that should have been done by now....

craigbrass · 05-09-2007, 09:10 AM

Did Varun say it would be done then or he would consider it?

supportskins · 05-09-2007, 10:52 AM

I am sure he meant he will consider it

**Digital Mayhem** · 05-09-2007, 12:35 PM

consider it along with he would consider my other 10-15 suggestions.. just like I suggested labels in the members.kayako.net now he said that one would be done but that hasn't yet.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Live chat button on SSL page	ziaka	LiveResponse Desktop Application	5	07-03-2007 07:57 PM
IMAP, IMAP SSL , e-mails questions	gerardo	SupportSuite, eSupport and LiveResponse	0	11-05-2006 04:34 PM

craigbrass Offline Senior Member Posts: 4,986 Join Date: Jun 2005 Location: Cumbria, UK SupportSuite Owned License	support.kayako.com on SSL - 26-08-2007, 04:37 PM I think Kayako's support domain should be put on SSL so that if you submit FTP details, etc they are secure. Craig Brass - Kayako Forum Squatter (Note: I am NOT a staff member) Icon Headquarters - Its Elixir - Web2Messenger

supportskins Offline Senior Member Posts: 3,278 Join Date: Aug 2006 Location: Mumbai, India SupportSuite Owned License	26-08-2007, 06:50 PM I second this! Professional and Affordable Kayako Skins - Specialists in Kayako Skinning & Customization - Professional Paid Support Our Skins and Services - http://www.supportskins.com/store/ SupportSkins.com - http://www.supportskins.com/

grahame Offline New Member Posts: 15 Join Date: Aug 2007 Location: Berkshire, UK SupportSuite Owned License phpinfo()	04-09-2007, 09:39 AM Greetings, Did anything happen about this? FTP is the focus of a lot of hacker attention. It and non-secured HTTP are very easy to snoop and we have experience that it does happen. I'm not paranoid, they really are out to get me! Grahame

craigbrass Offline Senior Member Posts: 4,986 Join Date: Jun 2005 Location: Cumbria, UK SupportSuite Owned License	04-09-2007, 09:41 AM Don't think anything further has happened. I really think it needs done ASAP tho. Craig Brass - Kayako Forum Squatter (Note: I am NOT a staff member) Icon Headquarters - Its Elixir - Web2Messenger

craigbrass Offline Senior Member Posts: 4,986 Join Date: Jun 2005 Location: Cumbria, UK SupportSuite Owned License	04-09-2007, 12:15 PM Isn't it just a case of getting an SSL cert, installing it then forcing SSL redirection on the subdomain? Craig Brass - Kayako Forum Squatter (Note: I am NOT a staff member) Icon Headquarters - Its Elixir - Web2Messenger

craigbrass Offline Senior Member Posts: 4,986 Join Date: Jun 2005 Location: Cumbria, UK SupportSuite Owned License	04-09-2007, 12:58 PM Oh yea, forgot about that. Craig Brass - Kayako Forum Squatter (Note: I am NOT a staff member) Icon Headquarters - Its Elixir - Web2Messenger

Digital Mayhem Offline Community Moderator Posts: 834 Join Date: May 2005 Location: Henderson, Nevada SupportSuite Owned License phpinfo()	04-09-2007, 11:10 PM well I suggested this to varun over a year ago so something that should have been done by now.... Steve Digital Mayhem, Inc. AIM: Steve.Lawrence@Digital-Mayhem.biz MSN: Steve.Lawrence@Digital-Mayhem.biz YAHOO: DigitalMayhem_Steve SKYPE: DigitalMayhem_Steve I'm Important

craigbrass Offline Senior Member Posts: 4,986 Join Date: Jun 2005 Location: Cumbria, UK SupportSuite Owned License	05-09-2007, 09:10 AM Did Varun say it would be done then or he would consider it? Craig Brass - Kayako Forum Squatter (Note: I am NOT a staff member) Icon Headquarters - Its Elixir - Web2Messenger

supportskins Offline Senior Member Posts: 3,278 Join Date: Aug 2006 Location: Mumbai, India SupportSuite Owned License	05-09-2007, 10:52 AM I am sure he meant he will consider it Professional and Affordable Kayako Skins - Specialists in Kayako Skinning & Customization - Professional Paid Support Our Skins and Services - http://www.supportskins.com/store/ SupportSkins.com - http://www.supportskins.com/

Digital Mayhem Offline Community Moderator Posts: 834 Join Date: May 2005 Location: Henderson, Nevada SupportSuite Owned License phpinfo()	05-09-2007, 12:35 PM consider it along with he would consider my other 10-15 suggestions.. just like I suggested labels in the members.kayako.net now he said that one would be done but that hasn't yet. Steve Digital Mayhem, Inc. AIM: Steve.Lawrence@Digital-Mayhem.biz MSN: Steve.Lawrence@Digital-Mayhem.biz YAHOO: DigitalMayhem_Steve SKYPE: DigitalMayhem_Steve I'm Important