I have been looking at the digital signitures (the digest
function of SSL - AKA dgst, MD5, and whatnot) we discussed at Perks.
OpenSSL seems to offer a good solution with its package of SSL. I
use the OpenSSL and it works like a charm. I have not used MD5, or
dgst yet, but the OpenSSL seems to have all of the information we
need to use it.
The tricky part will be setting up our site to make the
information easy to verify. I was thinking a good solution is a
two-part key, one for the label, and one for the iso image. A
databse reference number on the label should lead them to the
information about the iso image or CD, and the digital signiture to
verify the MD5 key. That way faking a label doesn't buy you
anything. I have been drawing datamps, but I don't have anything
really close to an algorithm yet. Secure and simple are not words
that go well together in the same sentence.
Without the assurance that CDs and downloadable images are what
they claim to be though, we will never get off the ground.
I am thinking of a system where they take the CD and type in an
eight to ten digit alpha numeric from the label and our database pops
up the information that should be on the label and a key verification
app. They load the CD and push go, and our app checks the CD key
(for Windows machines) and/or gives them a script to run to verifiy
the key on the CD or ISO image.
I think if it is much more complicated than that, it would not
get used. If it were much more simple though, someone could fake our
branding and the next thing you know we're in all the papers with
some idiot in a copyright problem, or worse.
Any thoughts? Any takers for the database?
Here is the link for OpenSSL:
http://www.openssl.org/docs/apps/dgst.html
=====
Warmest Regards,
Doug Riddle
http://www.dougriddle.com
## Firearms are second only to the Constitution in importance; they are the
Peoples' Liberty Teeth." - George Washington ##
__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com
