[ANN] Terminus

Cees de Groot cg at cdegroot.com
Sat Dec 18 01:14:57 UTC 2004


"Terminus - the Guardian of Boundaries"
(I'm in Roman God Mode w.r.t. package naming...)

This is an interface to the SqueakPeople Web Of Trust and Accounts system.  
Registered applications can pass in a username and password, and get back  
nil or the SqP ranking of the person. The system employs DSA to verify  
that the requestor is indeed authorized to request a password check and  
SHA to transmit a hash of the password, rather than a cleartext version.  
This should make the system secure at men-in-the-middle and sniffers.

I will setup the server at people.squeakfoundation.org later this weekend  
(it's a bit late and there are no Terminus clients to profit from it  
anyway at this moment ;-)). If you like, download Terminus-Server from the  
Terminus package at Squeak Source to see whether I left any glaring  
security holes.

Terminus server access is non-public. Read the Friendly Class comment in  
the client package for details.

Suggested uses: secure Wiki's against link spammers, mostly. I'm still in  
a dillema whether to add Terminus-Client to Swiki or whether to transfer  
relevant Swikis to Gardner first and add Terminus functionality later.  
Anyway, by having a no-frills login you can quickly check what someone is  
at SqP and decide whether to lot him/her upload, modify the front page,  
etcetera. Suggestions for other uses (and enhancements) are most welcome.

http://map1.squeakfoundation.org/sm/account/package/67ff1f57-94f6-4db6-baed-5ff080727179

Regards,

Cees



More information about the Squeak-dev mailing list