Anonymous_User Absent Member.
Absent Member.
870 views

iPrint security = high, but no certificate verification??

With the security level set to high (SSL/TLS secured printing enabled), I
was curious why the iPrint client doesn't seem to validate/check the
server's certificate before begining the encryption process? For instance,
when I go to my SSL-enabled https iPrint site, the browser does a
validation against the server's certificate and pops up a complaint
because my server is self-signed and therefor my browser doesn't trust it,
it asks me if I want to proceed. However, when I submit a print job, TLS
doesn't seem to care about checking the server's certificate and jumps
right into encrypting the data. Is there a way to turn on such
verification? The reason we are concerned about this in the context of
wireless and a man in the middle attack being possible with no such
verification.

Any advice?

Thanks
-Rob

0 Likes
2 Replies
Anonymous_User Absent Member.
Absent Member.

Re: iPrint security = high, but no certificate verification??

rwgorrel@uncg.edu wrote:
> With the security level set to high (SSL/TLS secured printing enabled), I
> was curious why the iPrint client doesn't seem to validate/check the
> server's certificate before begining the encryption process? For instance,
> when I go to my SSL-enabled https iPrint site, the browser does a
> validation against the server's certificate and pops up a complaint
> because my server is self-signed and therefor my browser doesn't trust it,
> it asks me if I want to proceed. However, when I submit a print job, TLS
> doesn't seem to care about checking the server's certificate and jumps
> right into encrypting the data. Is there a way to turn on such
> verification? The reason we are concerned about this in the context of
> wireless and a man in the middle attack being possible with no such
> verification.


The iPrint client currently does not support certificate validation, as
you surmised. So secure printers give you only encryption and do not
protect against man-in-the-middle attacks. This is a feature I'd like
to see added, but who knows if/when resources will be available to do
it. Currently, adding support for Vista is a much higher priority.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: iPrint security = high, but no certificate verification??

Thanks, I appriciate the information and I agree, I would much rather see
Vista support sooner.
Is there a process I can go through to go on record for a feature
enhancement though?
Not that I would expect anything, but its good to hear that its been
thought about and I'm willing to
put something in writing so that perhaps one day, resources could be
allocated to explore this.

Thanks again,
-Rob

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.