On Friday 03 July 2009 20:19:33 Zero3 wrote: > Matthew Toseland skrev: > > So do we want to disable JSTUN by default? On darknet you definitely need > > either JSTUN or UPnP or a static IP address; on opennet, reannouncing may > > work better if we have quick detection of a changed IP address, currently > > IIRC we give it a minute or so to detect it before re-announcing ... > > IMHO it seems like a bad idea (with regards to security) to enable JSTUN > on darknet-only nodes by default. I suggest showing an on-demand "Detect > IP address" (using UPnP/JSTUN with description like the ones below) > button on the darknet page when the IP is unknown and we need it to > craft the node reference.
Hmmm, it might make sense to show a warning *on the add a friend page* when we don't have a valid IP address ... > > If opennet nodes are a reliable source of IP detection, aren't they > preferred to connecting to third-party JSTUN servers? (not that I think > JSTUN in general is a security issue, but if we can get the same > information from other users...) Not if we are on pure darknet, no. > > > OTOH I think the current wizard text is reasonable: > > > > Plugins > > > > Plugins are optional extensions to Freenet that enhance it in some way. > > Some of them may have security issues for some users, see below. > > > > Enable Universal Plug and Play (UPnP). Set this if you have a router on > > your local Network. Don't set it if you are directly connected to your ISP > > e.g. via dial-up modem, or have untrusted people on your local network. > > > > Enable automatic IP address detection via JSTUN. Uses central servers (also > > used by e.g. internet telephone programs) to find out your IP address. Turn > > off if you are concerned about this. > > I think that is much better than what used to be there. I still think a > short explanation of why Freenet needs the IP address would be a good idea. Suggested text? > > - Zero3
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Devl mailing list [email protected] http://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl
