Comments (13)
Edited for brevity and clarity
from gert.
As a side note, common real-world protection schemes use hashed passwords for encryption keys (using functions known as PBKDF.)
from gert.
Ok. But if you plan on doing so when thinking about protection methods, use a different hash than SHA-256
from gert.
It's definitely an interesting idea. I raised a concern on the Discord about this, but I'm willing to seriously consider this.
from gert.
Also i forgot to said it since all time, but the whole point of having multiple MNC is that wireless range is limited, and doing cables require chunk-loading all of them (unless there is a specific mod for it, which is to avoid)
from gert.
Multiple clients can broadcast a wireless signal. You don't need more than one MNC for that.
from gert.
You mean clients can like, "extend" the wireless range of MNC by relaying its packets?
from gert.
Because GERTi is partially a mesh network, not all packets run through the MNC. Clients can join the network by connecting to other clients, which can then act as a relay. In one sense, they do act as wireless extenders, but I just want to try to clarify that the MNC is not directly involved with all internal network traffic.
from gert.
Oh, i didn't knew that. Well, except for security, WiMNC is useless. And that's cool that clients can act as relays.
from gert.
But like i said, you could maybe implement some sort of security layer between clients and MNC. Because for now, if a client act as relays, it can easily read messages originally sended to an other client. And even do spoofing (sending messages as it)
from gert.
Anyways i'm closing this issue, we can continue to speak here if it's about the security layer
from gert.
I totally understand what you are saying about security. I tried to implement some limited controls in the base protocol, but there is only so much I can do in the amount of space I wanted to use. I feel that it would be best for a security protocol to sit above GERT and perhaps expose wrapped sockets. That way, it doesn't increase the size of the GERT protocol and can remain optional due to not everyone needing the extra security.
from gert.
Yea, i think a library including some sort of security would be the most appropriate
from gert.
Related Issues (20)
- Windows Support/Port HOT 1
- Asynchronous Processing HOT 1
- Double Accept Crash
- Directory Peers HOT 1
- Unclean Closing HOT 2
- GERTe API Read Error HOT 3
- Tunnels
- Update GERTe Wiki
- Redo Statuses
- Build Web in Parallel
- Spurious Wakeup HOT 1
- Linux Crash on Gateway Registration HOT 1
- Socket read buffer is always empty HOT 1
- Segmentation Fault when Interrupted
- Make GERTiMNC and GERTiClient services HOT 2
- Solve Replay Attack HOT 1
- Odd Crash Behavior on Windows
- Inconsistent Windows Shutdown HOT 1
- Add Missing API for Encryption
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from gert.