Re: [Opensim-dev] Security: multiple or the most generic?

2009-04-14 Thread DZO
) -- Message: 1 Date: Mon, 13 Apr 2009 10:37:15 -0700 From: Diva Canto d...@metaverseink.com Subject: [Opensim-dev] Security: multiple or the most generic? To: opensim-dev@lists.berlios.de Message-ID: 49e3784b.1090...@metaverseink.com Content-Type: text/plain

Re: [Opensim-dev] Security: multiple or the most generic?

2009-04-14 Thread Melanie
Canto d...@metaverseink.com Subject: [Opensim-dev] Security: multiple or the most generic? To: opensim-dev@lists.berlios.de Message-ID: 49e3784b.1090...@metaverseink.com Content-Type: text/plain; charset=ISO-8859-1; format=flowed I've been debating with myself and with some ppl in IRC about

Re: [Opensim-dev] Security: multiple or the most generic?

2009-04-14 Thread Michael Cortez
Melanie wrote: They are very different. A key is specific for one client-server pair. So for each region the client visits there is a unique key that the other regions might not know about. When TPs are performed on the server-side, this is equivalent to (b) because the regions are acting

Re: [Opensim-dev] Security: multiple or the most generic?

2009-04-14 Thread Diva Canto
Date: Mon, 13 Apr 2009 10:37:15 -0700 From: Diva Canto d...@metaverseink.com Subject: [Opensim-dev] Security: multiple or the most generic? To: opensim-dev@lists.berlios.de Message-ID: 49e3784b.1090...@metaverseink.com Content-Type: text/plain; charset=ISO-8859-1; format=flowed I've been

Re: [Opensim-dev] Security: multiple or the most generic?

2009-04-14 Thread Diva Canto
Michael Cortez wrote: Any particular reason why the system could not use the SessionID (established for the source region) to validate the user as they transfer to the destination region -- but once validated, a new SessionID is generated for the target region and the old SessionID

Re: [Opensim-dev] Security: multiple or the most generic?

2009-04-14 Thread Diva Canto
And while this kind of spoofing may look absolutely scary in the context of a web of VWs, it may be a feature in game applications. Diva Canto wrote: Michael Cortez wrote: Any particular reason why the system could not use the SessionID (established for the source region) to validate the

[Opensim-dev] Security: multiple or the most generic?

2009-04-13 Thread Diva Canto
I've been debating with myself and with some ppl in IRC about whether OpenSim should support many security schemes or shoot for the most generic one. Advice appreciated. Here's the situation. There are already 3 different authentication schemes on the pipeline for Teleports, one of them being

Re: [Opensim-dev] Security: multiple or the most generic?

2009-04-13 Thread Ideia Boa
Yes and (c) Ideia Boa cumprimentos e boa pascoa Cristina Diva Canto wrote: I've been debating with myself and with some ppl in IRC about whether OpenSim should support many security schemes or shoot for the most generic one. Advice appreciated. Here's the situation. There are already 3

Re: [Opensim-dev] Security: multiple or the most generic?

2009-04-13 Thread Melanie
Well, if a key is an arbitrary string, then it may also be a constant UUID value, e.g. the standard session id we have now, so (c) really includes (b). Now, my vision of the future 3d internet is that all grids will be walled gardens, trust domains, as an analog to a large, multi-server

Re: [Opensim-dev] Security: multiple or the most generic?

2009-04-13 Thread Diva Canto
Melanie wrote: Well, if a key is an arbitrary string, then it may also be a constant UUID value, e.g. the standard session id we have now, so (c) really includes (b). They are very different. A key is specific for one client-server pair. So for each region the client visits there is a unique

Re: [Opensim-dev] Security: multiple or the most generic?

2009-04-13 Thread Stefan Andersson
-data.com CC: opensim-dev@lists.berlios.de Subject: Re: [Opensim-dev] Security: multiple or the most generic? Melanie wrote: Well, if a key is an arbitrary string, then it may also be a constant UUID value, e.g. the standard session id we have now, so (c) really includes (b