-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 George Patterson schrieb: > As an idea, could we add a section to say what ip addresses range to > expect the packets to orginate from. This would help protect the key > against being brute forced. This way we may not even need to do the > public/private key thing but instead a hash (MD5 perhaps??) of > containing the players name and a key phrase of the user's choice.
The IP range will not work. There are too many cases where the IP can change to other networks. Think of home, work and public WLAN. Or when you switch your ISP. Just take a long enough token and everything is fine. The time to brute force it can be made as long as we want to. *AND* there's nothing gained by a "stolen" call sign. At least nothing that justifies the bandwidth for a brute force attac. I'd be more worried about an outdating mechanism that throws out all callsigns that weren't used for a long time. > A simple front end would need to be created (Probably web based but cli > might work also). I've done quite a lot of PHP and LDAP so I can tell you that it's easy to create web applications using it. But for administration I suggest that you stick with the normal LDAP administration programms. Softerra (comercial, Windos) was quite good. Under Linux I've used GQ (GPL, very unstable 2-3 years ago - but it seems that they've got a 1.0 version now). CU, Christian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (MingW32) iD8DBQFExlDelhWtxOxWNFcRAtlfAJ4mD0yfnMEnWXUZMF35QIcjVAF1TgCggr0g MSJ8b8EhCczjjt383Tsh9cQ= =IGhT -----END PGP SIGNATURE----- ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Flightgear-devel mailing list Flightgear-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/flightgear-devel
