http or Https moodle?

[undercover]

Getting our server set up for outside access to moodle, our VLE.

Should it be set up for HTTP or HTTPS? no money transactions will take place on there, but there will be lots of student data on there.

If it is set up as HTTPS what else will i need to do? get a security certificate? hows this work and how much does it cost.

 

Cheers

[jamesb]

If there's any data on there which could identify students (and there will be) then you'll need HTTPS. To do that you'll need to get an SSL certificate, I believe there are a few threads around here which tell you where you can get free ones for education.

[Geoff]

Also be aware that using HTTPS across the whole site will cause increased CPU load on your web server. If this becomes an issue, you can get 'HTTPS/SSL accelerator' cards that offload the encryption from the main CPU. Although they aren't cheap.

[matt40k]

Godaddy do a basic SSL license for £20 per year, there are a few others at a similar cost.

 

If you ask your LA\look on becta, there is a list of items that the are defined as unique, therefore you must make sure they are secure. Personally, I would use HTTPS, not too much hassle and any extra security is a bonus, plus, lets face it, if it isn't need to be secure now, you can be sure it will in the future.

 

It's better to do it then have someone breathing down your neck asking why it isn't later on.

[matt40k]

Also be aware that using HTTPS across the whole site will cause increased CPU load on your web server. If this becomes an issue, you can get 'HTTPS/SSL accelerator' cards that offload the encryption from the main CPU. Although they aren't cheap.

 

Soekris Engineering > vpn14x1 - 63.00 EUR

 

I know Sun servers normally come with SSL accelerators, I know the Sparc's are rather good at it too. Also The VIA C7 cpu have built in encryption ( LinITX.com - VIA EPIA ). To be honest, your better off getting a good dual core CPU. The vpn cards are for embedded machines.

 

If you're looking at a getting a new server and your using linux\unix, ask Sun. Otherwise, just pay an extra few quid for a faster cpu.