On Tue, 18 Apr 2000, awlydick wrote: <snip> > I advocate using a signing of messages with some sort of public key, this > would be much more difficult to crack then a password scheme, and probably > not too much more trouble to implement, since it looks like we will end up > with various types of signed messages anyway.
But even if you use PKs for this sort of thing, you are opening yourself up for a whole bunch of replay, replacement, man in the middle, and what not attacks. There are reasons why safe authentication protocols are complicated, and trying to implement our own is just not a good idea. > Another possibility, however, and one that would be even easier to implement, > would be your idea of STDIN/OUT only controls. (This just occured to me) The > user could then write a frontend of their own, using shell scripts or a custom > program (GUI / Network sockets / etc) to handle control. This solution should > make everyone happy, while keeping to the *nix-like ideal of simple flexible > parts that can be combined into something useful and new. I don't see why any > of the current proposals could be handled in this manner. And this, being my > current favorite thing to play with at the moment, would certainly be > something > I could contribute some time to. (Although my lady love *might* have a little > something to say about that ;-) Well, I see we agree then. The bold can run nc -lp 12942 | java Freenet.node.Node and we do not have to look bad for giving the option of awful security, while the paranoid (/wise) can keep it safe. > --Adam Lydick > > -- > Freenet -- Re-Wiring the Internet > http://freenet.sourceforge.net > My Node: tcp/rivendell.yi.org:19114 > > _______________________________________________ > Freenet-dev mailing list > Freenet-dev at lists.sourceforge.net > http://lists.sourceforge.net/mailman/listinfo/freenet-dev -- Oskar Sandberg md98-osa at nada.kth.se #!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj $/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1 lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/) _______________________________________________ Freenet-dev mailing list Freenet-dev at lists.sourceforge.net http://lists.sourceforge.net/mailman/listinfo/freenet-dev
