Re: [Embedlets-dev] embedlets & security

[Brill P. <bri...@ro...>]

I think this is an important aspect... and I was recently thinking of
implementing some sort of security for Cork...

Keep in mind that we're not just talking about password access, but
encryption as well, as clear-text passwords are fairly limited in their
ability to protect anything running over the network.

I think for our reference impl. we should definitely include it in our
design, but we may not be able to implement it for the first run (I envision
it will take some work) but we should include some sort of security manager
so checks can be performed, even if they always succeed.

- Brill Pappin


> Gentlepeople,
>
> While reading some of the messages on this list I started wondering if
> we're taking security into consideration while designing and are going to
> implement it from the start. One of the issues with webservices is (was?)
> the lack of standardized authentication/security, resulting in a delayed
> acceptance of webservices if one may believe the trade press.
>
> As we're designing software that can be use to control all kinds of
> equipment I would feel better if Joe Average Hacker would not be able to
> override the controls... (hmmm, just imagine some ignorant user starting
> the 'life wire' mode of Teds wiring tool and starting to switch random
> devices on and off)
>
> Regards,
>
> Jac
>
> --
>  Jac Kersing            Technical Consultant   The-Box Development
>  j.k...@th...                         http://www.the-box.com
>
>
> -------------------------------------------------------
> This SF.NET email is sponsored by:
> SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
> http://www.vasoftware.com
> _______________________________________________
> Embedlets-developer mailing list
> Emb...@li...
> https://lists.sourceforge.net/lists/listinfo/embedlets-developer
>