On Tue, Jul 27, 2010 at 7:18 PM, Martin Sustrik <[email protected]> wrote:

> As for real solution the only way to have authenticated pub/sub IMO is
> to encrypt messages on publisher and decrypt them on terminal
> subscriber. (All the intermediate untrusted nodes would just forward
> encrypted data.)

This is indeed a sensible design for secure multicast but IMO does not
scale for Internet use.  For one thing you need to create as many
endpoints as you have access types.  That works for LAN market data
cases and it's a design I'm depending on for the data plant I'm
working on.  It does not scale however.

I'm going to post a design proposal for authenticated pubsub and
custom routing over request-reply, which I think answers Oliver's use
case.

-Pieter
_______________________________________________
zeromq-dev mailing list
[email protected]
http://lists.zeromq.org/mailman/listinfo/zeromq-dev

Reply via email to