On Tue, Feb 20, 2007 at 10:22:55PM -0800, Justin Patrin wrote:
> >By symmetry, you'll probably also need it for syncing with a server
> >that requires auth?
> 
> Nope, pull, push, and sync all work fine with ssh-agent without
> entering a password, which I assume means that decrypt_rsa() is only
> used with serve.

Sure. My comment about symmetry comes from the fact that the thing
being decrypted on the server was first encrypted on the client.  But
of course, I was being dumb writing email while distracted, because
it's encrypted with the server's public key, and the keys are not
symmetric .. that being the whole point :)

(It's the HMAC key for the session in the initial netsync handshake,
see comments in netsync.cc under authentication -- and yes this needs
to change).

--
Dan.

Attachment: pgpLM7SMEyN6D.pgp
Description: PGP signature

_______________________________________________
Monotone-devel mailing list
[email protected]
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Reply via email to