[ANN] Terminus
Cees de Groot
cg at cdegroot.com
Sat Dec 18 01:14:57 UTC 2004
"Terminus - the Guardian of Boundaries"
(I'm in Roman God Mode w.r.t. package naming...)
This is an interface to the SqueakPeople Web Of Trust and Accounts system.
Registered applications can pass in a username and password, and get back
nil or the SqP ranking of the person. The system employs DSA to verify
that the requestor is indeed authorized to request a password check and
SHA to transmit a hash of the password, rather than a cleartext version.
This should make the system secure at men-in-the-middle and sniffers.
I will setup the server at people.squeakfoundation.org later this weekend
(it's a bit late and there are no Terminus clients to profit from it
anyway at this moment ;-)). If you like, download Terminus-Server from the
Terminus package at Squeak Source to see whether I left any glaring
security holes.
Terminus server access is non-public. Read the Friendly Class comment in
the client package for details.
Suggested uses: secure Wiki's against link spammers, mostly. I'm still in
a dillema whether to add Terminus-Client to Swiki or whether to transfer
relevant Swikis to Gardner first and add Terminus functionality later.
Anyway, by having a no-frills login you can quickly check what someone is
at SqP and decide whether to lot him/her upload, modify the front page,
etcetera. Suggestions for other uses (and enhancements) are most welcome.
http://map1.squeakfoundation.org/sm/account/package/67ff1f57-94f6-4db6-baed-5ff080727179
Regards,
Cees
More information about the Squeak-dev
mailing list
|