Text 304, 75 rader
Skriven 2005-05-14 21:32:38 av Michiel Broek (2:280/2802)
    Kommentar till text 303 av val khokhlov (2:463/180)
Ärende: Re: Ballot form
=======================
Hi Val,

val khokhlov wrote to Peter Knapper:
vk>   Greetings, Peter!
vk> 
vk> 14 May 05 22:39, Peter Knapper wrote to Val Khokhlov:
vk> 
vk>  PK> While I can see the advantage of this, in reality it has nothing to 
vk> do
vk>  PK> with the transport of Mail, and Fidonet (or the FTSC) should stay
vk>  PK> completely away from that one...
vk>         not exactly so. new storage might lead to some changes for 
vk> packet/message format. i was told recently someone invented pkt2000 
vk> format, for example. but being a husky and binkd developer, i can say that 

vk> i'm not going to implement pkt2000 just because it exists. i don't see any 

vk> changes in fidonet technology for last... 8 years (after binkp), which may 

vk> lead to new pkt format
vk>         anyway, it's too early to speak about standards :) we need to 
vk> create software first.

The pkt2000 format was only adopted by a few software packages. I won't put
it in mbse either. Changing the existing pkt format is difficult, but with
good thought you can do almost anything with the current format.

vk>  vk>> 2) routing automation,
vk>  PK> This would have been nice 10 years ago, but with so many nodes moving 

vk> to
vk>  PK> IP connectivity, point-to-point traffic is becoming very much the 
vk> norm,
vk>         you see, p2p in fidonet is not-so-desirable because there're no 
vk> effective auth schemes. with password auth you can't do p2p (well, you 
vk> need to specify password for each link). so, in order to use p2p we need 
vk> some pka scheme ([open]ssl seems reasonable to me).
vk>         but it's for ip-nodes. for pstn, routing is rather big problem in 
vk> large networks. there's software for routing automation (e.g. safrouter), 
vk> but i don't know any good way to make routing fully automatic (which 
vk> includes creating routing maps, distributing and using them)

When there was only pots you had less checking available then today via IP.
Sessions without a password are only made for crash netmail. The basic thing
about fidonet is to accept netmail (policy), ssl adds nothing to it.
But with binkp you can add encryption easy between systems that support it
if you are worried about sniffers. 

As for routing, for pots/isdn, the nodelist does the routing for you. It IS
a routing map. You should add it to binkd. MBSE runs fine with a nodelist,
and for IP connections you can deliver directly to CM systems.

vk> 
vk>  PK> Yes to public-key for session/pkt traffic,
vk>         securing traffic is a minor feature. the main advancement is 
vk> validating a remote system. with node's certificates and revocation lists 
vk> we can effectively use p2p connections.

You can do a reasonable amount of tracking of IP nodes by using reverse
resolving via DNS, but you need to use a full nodelist for that.

But your idea about using certificates can be made to work without breaking
any existing software.



    Greetings, Michiel Broek

Email:   mbse@mbse.dds.nl
Fidonet: Michiel Broek at 2:280/2802

... Each of us bears our own Hell.

--- MBSE BBS v0.71.2 (GNU/Linux-i386)
 * Origin: MBSE Linux BBS. Made in the Netherlands (2:280/2802)