I have a program I wrote, client and server, that communicate through sockets - There currently is no sort of authentication between the two other than hosts.allow allowing the IP of the client for that port, and that's all. People wanting to use my program have told me they won't use it unless I implement some sort of encryption using SSL or SSH tunneling. I don't really want to do this, so i was thinking of putting in some sort of challenge handshake, using MD5 hashes based on 'something'. Does anyone know of any good examples on how to do this, or where to start?
I'm thinking there is some sort of common passcode between the client/server - The client sends a number based on some sort of algorythm performed on the code - The server takes that, runs it through it's own algorythm, and then the client has to send another number, and that number should match what the server came up with. I haven't really done any mathematical programming, so.. I don't know how to write this where it would be too weak. Any suggestions on where to start? -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
