On Wednesday, June 5, 2002, at 01:38 , David T-G wrote: [..] > % use it unless I implement some sort of encryption using SSL or SSH > % tunneling. I don't really want to do this, so i was thinking of putting > % in some sort of challenge handshake, using MD5 hashes based on > > Rather than rolling your own and doing some hash handshaking, why not > just wrap your socket calls in something like Net::SSH and let the module > negotiate the ssl for you? I have to think that there's a module out > there that handles exactly this sort of thing... [..]
cf: http://search.cpan.org/search?mode=module&query=Net%3A%3ASSH and/or http://search.cpan.org/search?mode=module&query=Net%3A%3ASSL the third leg in your process is where it is going to be tough. namely how to configure and manage your own variation on 'hosts allow' so that you have a higher level of confidence that any 'cookies' you pass back and forth through your secure encrypted connection are going to and coming from places that you consider safe... remember that since you will be 'exposing the code' since the client side will be 'out there' - you really can not embed in it the mechanisms by which you solve this 3rd leg - other than that you will need to have the 'configureMe.pl' tool to make that possible.... ciao drieux --- all software solutions are EVIL - some are also just ugly -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
