Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Troy Benjegerdes
On Mon, Feb 17, 2014 at 04:07:08PM -0800, Russ Allbery wrote: Jeffrey Hutzelman jh...@cmu.edu writes: On Mon, 2014-02-17 at 13:11 -0600, Troy Benjegerdes wrote: So $10k for design, and $100k for implementation sufficient to protect a small business's data worth between $250k, and $1M.

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Brandon Allbery
On Thu, 2014-02-20 at 13:14 -0600, Troy Benjegerdes wrote: I remember hearing lots of arguments that getting rid of DES keys would take tens or hundreds of thousands of dollars, and that 'developers need to eat' etc etc. Then one day an exploit was announced, and all of a sudden we got

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Russ Allbery
Troy Benjegerdes ho...@hozed.org writes: I remember hearing lots of arguments that getting rid of DES keys would take tens or hundreds of thousands of dollars, and that 'developers need to eat' etc etc. Then one day an exploit was announced, and all of a sudden we got

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Troy Benjegerdes
On Mon, Feb 17, 2014 at 10:21:40PM +0200, Jukka Tuominen wrote: Personally, I feel a bit bad that a great system like OpenAFS needs to be stitched with a separate VPN and file encryption software, when it could be all built-in. Combining tools doing their jobs well is not a bad

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Troy Benjegerdes
On Thu, Feb 20, 2014 at 11:27:07AM -0800, Russ Allbery wrote: Troy Benjegerdes ho...@hozed.org writes: I remember hearing lots of arguments that getting rid of DES keys would take tens or hundreds of thousands of dollars, and that 'developers need to eat' etc etc. Then one day an

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Jeffrey Altman
On 2/20/2014 2:14 PM, Troy Benjegerdes wrote: On Mon, Feb 17, 2014 at 04:07:08PM -0800, Russ Allbery wrote: That's not out of the realm of possibility. We've collectively spent far more than that on the rxgk specification, although I suspect much of that time was uncompensated or written off

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Russ Allbery
Troy Benjegerdes ho...@hozed.org writes: Maybe we are not thinking about this in the right frame. There are billions of dollars worth of cryptographic currencies that did not exist when we started arguing about needing to replace DES keys, and if I had left my graphics card mining bitcoin

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Troy Benjegerdes
On Thu, Feb 20, 2014 at 12:37:19PM -0800, Russ Allbery wrote: Troy Benjegerdes ho...@hozed.org writes: Maybe we are not thinking about this in the right frame. There are billions of dollars worth of cryptographic currencies that did not exist when we started arguing about needing to

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Jukka Tuominen
On 20.2.2014, at 21.30, Troy Benjegerdes ho...@hozed.org wrote: On Mon, Feb 17, 2014 at 10:21:40PM +0200, Jukka Tuominen wrote: Personally, I feel a bit bad that a great system like OpenAFS needs to be stitched with a separate VPN and file encryption software, when it could be all

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-19 Thread Derek Atkins
hays h...@cs.unc.edu writes: openafs-info-requ...@openafs.org wrote: Am Montag 17 Februar 2014, 14:05:23 schrieb Lars Schimmer: Or does anyone has another idea on howto encrypt a directory in OpenA= FS on client system without any further interaction? What about Truecrypt? Has the

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-18 Thread hays
openafs-info-requ...@openafs.org wrote: Am Montag 17 Februar 2014, 14:05:23 schrieb Lars Schimmer: Or does anyone has another idea on howto encrypt a directory in OpenA= FS on client system without any further interaction? What about Truecrypt? Has the advantage of being

[OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Lars Schimmer
Hi! Does anyone using EncFS in combination with OpenAFS? Currently I can change into the directory, but gets a permission denied if I try to create files/directory. Anyone here tried already? Or does anyone has another idea on howto encrypt a directory in OpenAFS on client system without any

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Lars Schimmer
On 2014-02-17 14:05, Lars Schimmer wrote: Hi! Does anyone using EncFS in combination with OpenAFS? Currently I can change into the directory, but gets a permission denied if I try to create files/directory. Anyone here tried already? Or does anyone has another idea on howto encrypt a

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Dirk Heinrichs
Am Montag 17 Februar 2014, 14:05:23 schrieb Lars Schimmer: Or does anyone has another idea on howto encrypt a directory in OpenAFS on client system without any further interaction? What about Truecrypt? Has the advantage of being platform-independent. Bye... Dirk -- Dirk Heinrichs

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Jeffrey Altman
On 2/17/2014 11:10 AM, Troy Benjegerdes wrote: Could some of the professionals here please estimate a direct dollar cost for such a thing? Who is going to pay for the design and estimation efforts? There are many approaches that can be used but before selecting one over another it is

WinAFS vs Encryption Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Jeffrey Altman
On 2/17/2014 8:05 AM, Lars Schimmer wrote: Hi! Does anyone using EncFS in combination with OpenAFS? Currently I can change into the directory, but gets a permission denied if I try to create files/directory. Anyone here tried already? Or does anyone has another idea on howto encrypt a

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Jukka Tuominen
Do you accept euros? :) I just think that this might be a good time to get European funding for Internet security projects like this? Personally, I feel a bit bad that a great system like OpenAFS needs to be stitched with a separate VPN and file encryption software, when it could be all

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Troy Benjegerdes
On Mon, Feb 17, 2014 at 11:35:14AM -0500, Jeffrey Altman wrote: On 2/17/2014 11:10 AM, Troy Benjegerdes wrote: Could some of the professionals here please estimate a direct dollar cost for such a thing? Who is going to pay for the design and estimation efforts? There are many

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Troy Benjegerdes
Oh, and if you tack on full IPv6 support, I can pay in Catcoin, although it will probably cost me more in legal fees if euros are involved too. Jukka: What do you think about floating an indiegogo campaign to fund the stage-1 design/estimation work, and have a 'stretch goal' of getting a legal

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Stephan Wiesand
On Feb 17, 2014, at 19:48 , Jukka Tuominen wrote: Do you accept euros? :) I just think that this might be a good time to get European funding for Internet security projects like this? It would probably take much more than adequate funding for a solid implementation to get such a feature

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Jukka Tuominen
Personally, I feel a bit bad that a great system like OpenAFS needs to be stitched with a separate VPN and file encryption software, when it could be all built-in. Combining tools doing their jobs well is not a bad strategy. Using EncFS with OpenAFS as the backend sounds interesting.

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Jason Edgecombe
On 02/17/2014 08:05 AM, Lars Schimmer wrote: Hi! Does anyone using EncFS in combination with OpenAFS? Currently I can change into the directory, but gets a permission denied if I try to create files/directory. Anyone here tried already? Or does anyone has another idea on howto encrypt a

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Jeffrey Hutzelman
On Mon, 2014-02-17 at 13:11 -0600, Troy Benjegerdes wrote: So $10k for design, and $100k for implementation sufficient to protect a small business's data worth between $250k, and $1M. No, that's not what Jeff said. What he said was that doing the design and analysis work required to come up

RE: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread milek
OpenAFS + ZFS with encryption enabled? -- Robert Milkowski http://milek.blogspot.com ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Russ Allbery
Jeffrey Hutzelman jh...@cmu.edu writes: On Mon, 2014-02-17 at 13:11 -0600, Troy Benjegerdes wrote: So $10k for design, and $100k for implementation sufficient to protect a small business's data worth between $250k, and $1M. No, that's not what Jeff said. What he said was that doing the