On 10/22/2015 05:09 PM, Dimitry Sibiryakov wrote:
> 22.10.2015 15:58, Alex Peshkoff wrote:
>> Thomas, that's hardly possible. The main problem here is that yes, we
>> can provide plugin with more or less complex encryption algorithm. But
>> what is unresolved - how to provide a crypt key for it in opened source
>> system? The only more or less acceptable known solution (key is stored
>> inside plugin which is protected from debugging and can not be run on
>> not-authorized box) is definitely incompatible with open source.
>     You can create plugin that gets the key from user application somehow.
>

If we talk about single client, opening access to all the rest of users 
- this is worth thinking about. (distributing a key over all clients is 
definitely bad idea) Moreover, we have an encrypted (by default) network 
channel to send that key.

But we plan to sign RC1 in a few days (if not hours) and I'm not sure 
that adding plugin after it is good idea...


------------------------------------------------------------------------------
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to