Re: [Opengate-devel] GUI

[Gary L. <Ult...@gm...>]

Christoph Brill wrote:
>  The concept is like this: The
> clients connect themself to a server. The server talks to the metaserver
> for authentication. If the client is valid against the metaserver, it can
> talk to the server.

I am not sure if this is a good idea. If the client sends his username and password to the game server 
and the game server only passes the data to the meta server, this is a security lack. Folks could write 
their own game server and capture all account data of the clients which try to connect to the opengate 
universe instead of passing it to the meta server. so the clients should authenticate directly with the 
meta server. if the auth. is successful this client will recieve the infos which are necessary that the 
client know which game server to contact if he jumps through an jumpgate.

there would also be another problem. The meta server is the only server known by everyone. Which game 
server should the client auth. against if he enters the game.

 > If a player enters a jumpgate, the server looks which server hosts the sector
 > and refers the client to the other server.

You mean the meta server looks which game server hosts the sector, right? I like that idea! That would 
make it unnecessary to send any playerlists.

Regards,
Gary