View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0002076 | unreal | ircd | public | 2004-09-17 15:45 | 2004-09-17 23:46 |
| Reporter | brett | Assigned To | |||
| Priority | normal | Severity | feature | Reproducibility | N/A |
| Status | closed | Resolution | open | ||
| Product Version | 3.2.1 | ||||
| Summary | 0002076: encrypted cloak keys | ||||
| Description | make a way to encrypt the cloak keys so when they are placed on remote http servers that dont use .htaccess or any other form or security that they are not humanly readable.. | ||||
| 3rd party modules | |||||
|
|
How 'bout just not put your cloak keys on such an easily accessible location? :P |
|
|
i dont have access to a webserver that i can do that on :/ ... plus with the importance of the cloak keys I thought this was good for a security point of view... i.e. links you might not trust fully |
|
|
chown <user:group> unrealircd.conf ; chmod 0600 unrealircd.conf Basic encryption can and will be broken very easily (except for high encryption using 4096 bit RSA keys, which is not feasible). edited on: 2004-09-17 21:30 |
|
|
[quote]plus with the importance of the cloak keys I thought this was good for a security point of view... i.e. links you might not trust fully [/quote] Uhh no? When you receive the cloak key, it will need to be decrypted. This means there would be some kind of "cloak key password" that is used to encrypt/decrypt it. If the admin of the server you don't trust has this password (which he must in order to link), then he has the cloak keys anyway. This is not an appropriate implementation of encryption. If you want your remote includes secured, this is *exactly* why we have support for HTTP authentication and SSL. Those tools are designed for just such things. It seems foolish for me to basically code my own encryption when that's what HTTPS does for us already. |
|
|
ok , sorry.. just a idea... |
|
|
close it of then plz codemaster |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2004-09-17 15:45 | brett | New Issue | |
| 2004-09-17 16:12 | aquanight | Note Added: 0007677 | |
| 2004-09-17 17:01 | brett | Note Added: 0007680 | |
| 2004-09-17 21:27 | al5001 | Note Added: 0007682 | |
| 2004-09-17 21:30 | al5001 | Note Edited: 0007682 | |
| 2004-09-17 21:52 |
|
Note Added: 0007685 | |
| 2004-09-17 21:57 | brett | Note Added: 0007686 | |
| 2004-09-17 21:58 | brett | Note Added: 0007687 | |
| 2004-09-17 23:46 |
|
Status | new => closed |
