[Embedlets-dev] Re: [Arch]embedlets & security

[Ted K. <tk...@ya...>]

Brill stated:

> I think this is an important aspect... and I was recently thinking of
> implementing some sort of security for Cork...
> 
> Keep in mind that we're not just talking about password access, but
> encryption as well, as clear-text passwords are fairly limited in their
> ability to protect anything running over the network.
> 
> I think for our reference impl. we should definitely include it in our
> design, but we may not be able to implement it for the first run (I envision
> it will take some work) but we should include some sort of security manager
> so checks can be performed, even if they always succeed.

If we go with TINI/TStik as a reference platform (which is the way I am also
leaning for a number of reasons) then we can use the iButton holder clip that
is present on most TINI/TStik socket boards to hold a JavaCard compliant
iButton that could handle our digital signing and verification needs.

Of course, this will not help with Jac's 'random manipulation of I/O modules in
live wiring mode' scenario so we will need to do some more thinking on this
problem too.


Ted

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com