Chris Travers wrote:

> Actually, I think it is a very elegant solution.  However, I would
> wonder about security issues in scaling up.  It might work well for a
> 10 person company, but what if you want to add security-sensitive
> information over the messaging layer?

It would completely fail.  We don't issue any security-sensitive
messages over the IRC channel.  And obviously, malicious users could
easily spoof messages.  If we were to do this seriously, we'd have to
use a message bus with guaranteed delivery and proper authentication
and security.  (I supposed you could use a PKI and encrypt/sign the
IRC messages, but that just seems silly.)

> A second point is that Asterisk's AGI ought to allow you to plug into
> your perl scripts with more information than you can with a system()
> call.

We do use AGIs for some things, but for call-notification a system() call
was simpler.

[Anyway... we'd better get back to LedgerSMB discussions. :-)]

I've noticed mention about LedgerSMB 1.3. is it downloadable somewhere?
Well, I guess I could just pull from SVN...

Regards,

David.

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
Ledger-smb-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ledger-smb-devel

Reply via email to