On Friday 03 July 2009 20:19:33 Zero3 wrote:
> Matthew Toseland skrev:
> > So do we want to disable JSTUN by default? On darknet you definitely need 
> > either JSTUN or UPnP or a static IP address; on opennet, reannouncing may 
> > work better if we have quick detection of a changed IP address, currently 
> > IIRC we give it a minute or so to detect it before re-announcing ...
> 
> IMHO it seems like a bad idea (with regards to security) to enable JSTUN 
> on darknet-only nodes by default. I suggest showing an on-demand "Detect 
> IP address" (using UPnP/JSTUN with description like the ones below) 
> button on the darknet page when the IP is unknown and we need it to 
> craft the node reference.

Hmmm, it might make sense to show a warning *on the add a friend page* when we 
don't have a valid IP address ...
> 
> If opennet nodes are a reliable source of IP detection, aren't they 
> preferred to connecting to third-party JSTUN servers? (not that I think 
> JSTUN in general is a security issue, but if we can get the same 
> information from other users...)

Not if we are on pure darknet, no.
> 
> > OTOH I think the current wizard text is reasonable:
> > 
> > Plugins
> > 
> > Plugins are optional extensions to Freenet that enhance it in some way. 
> > Some of them may have security issues for some users, see below.
> > 
> > Enable Universal Plug and Play (UPnP). Set this if you have a router on 
> > your local Network. Don't set it if you are directly connected to your ISP 
> > e.g. via dial-up modem, or have untrusted people on your local network.
> > 
> > Enable automatic IP address detection via JSTUN. Uses central servers (also 
> > used by e.g. internet telephone programs) to find out your IP address. Turn 
> > off if you are concerned about this. 
> 
> I think that is much better than what used to be there. I still think a 
> short explanation of why Freenet needs the IP address would be a good idea.

Suggested text?
> 
> - Zero3

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
Devl mailing list
[email protected]
http://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to