9
edits
Talk:UDP API DEV: Difference between revisions
→Crypto Protocol: add response
(→Crypto Protocol: add response) |
|||
| Line 35: | Line 35: | ||
:And even a very basic AES encryption will be enough to prevent the password from being snooped while it is transmitted. I.e. in unsecured wireless network environments. | :And even a very basic AES encryption will be enough to prevent the password from being snooped while it is transmitted. I.e. in unsecured wireless network environments. | ||
:--[[User:Exp|Exp]] 04:55, 30 January 2006 (CET) | :--[[User:Exp|Exp]] 04:55, 30 January 2006 (CET) | ||
::If TLS really is too much overhead, I'd suggest using ESP (from IPSec) with static keying (so you don't need the additional complexity of IKE). You can encapsulate that in a UDP packet, instead of IP proto 50. | |||
::I think, if you're going to give users a "secure" checkbox, it really ought to be secure. The best way to accomplish that is to use a well-understood, well-studied security protocol instead of inventing yet another. The "invent yet another" security protocols all too often turn out to be completely insecure. | |||
::—[[User:Derobert|Derobert]] 14:56, 30 January 2006 (CET) | |||