From owner-freebsd-hackers@FreeBSD.ORG Sat Nov 6 05:17:13 2010 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F3743106566B for ; Sat, 6 Nov 2010 05:17:13 +0000 (UTC) (envelope-from jpaetzel@freebsd.org) Received: from out3.smtp.messagingengine.com (out3.smtp.messagingengine.com [66.111.4.27]) by mx1.freebsd.org (Postfix) with ESMTP id B67F48FC12 for ; Sat, 6 Nov 2010 05:17:13 +0000 (UTC) Received: from compute2.internal (compute2.nyi.mail.srv.osa [10.202.2.42]) by gateway1.messagingengine.com (Postfix) with ESMTP id 2F6A052F; Sat, 6 Nov 2010 01:17:13 -0400 (EDT) Received: from frontend1.messagingengine.com ([10.202.2.160]) by compute2.internal (MEProxy); Sat, 06 Nov 2010 01:17:13 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=messagingengine.com; h=from:to:subject:date:cc:references:in-reply-to:mime-version:content-type:content-transfer-encoding:message-id; s=smtpout; bh=WofKdE0zlNV8aKi9CmOwKWWp6q8=; b=MdR3rxx28bDsHP+8J1CRrMidzb3WlgO3W6WKOCdnRl8gTG1oOMEmPuxHTOpA0zxgXDSFQ6aSLmyoHrZLSHDS72314uRAIpPKNJkQxYAC30KnIuj2eZsi5OPBcLX8bqIxDBLWZzMz5Kz2z/8ctrfuQsmhki3WGaBgNDCdooqozaQ= X-Sasl-enc: XClK0kYGTAtYTX7sS4UvMRh9mnl2d2q5hQVjfRAt4Hc3 1289020632 Received: from tcbug.ixsystems.com (174-145-138-211.pools.spcsdns.net [174.145.138.211]) by mail.messagingengine.com (Postfix) with ESMTPSA id A431C402234; Sat, 6 Nov 2010 01:17:12 -0400 (EDT) From: Josh Paetzel Organization: FreeBSD To: freebsd-hackers@freebsd.org Date: Sat, 6 Nov 2010 00:17:02 -0500 User-Agent: KMail/1.13.5 (FreeBSD/8.1-RELEASE; KDE/4.4.5; amd64; ; ) References: <201011052316.27839.jpaetzel@freebsd.org> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2887140.J7R9Bl7mQN"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <201011060017.10067.jpaetzel@freebsd.org> Cc: Garrett Cooper Subject: Re: txt-sysinstall scrapped X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Nov 2010 05:17:14 -0000 --nextPart2887140.J7R9Bl7mQN Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable On Friday, November 05, 2010 11:48:27 pm Garrett Cooper wrote: =20 > > Just to add to that (because I do find it a novel idea), 1) how > > are you going to properly prevent man in the middle attacks (SSL, TLS, > > etc?), and 2) what webserver would you use? > > I bring up the former item because I wouldn't want my data going > > unencrypted across any wire, and what BSD compatible web servers did > > you guys have in store and who would maintain the server, and what > > kinds of vulnerabilities would you be introducing by adding a service > > which would be enabled by default at runtime? >=20 > Sorry -- missed the SSL note. Other questions still outstanding :). >=20 > Thanks! > -Garrett Without putting much analysis into it, we talked about using lighttpd, whic= h=20 is BSDL. As far as another service, it would be running for the install on= ly=20 which is in most circumstances something that happens locally. =2D-=20 Thanks, Josh Paetzel =46reeBSD -- The power to serve --nextPart2887140.J7R9Bl7mQN Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.15 (FreeBSD) iQEcBAABAgAGBQJM1OTVAAoJEKFq1/n1feG2iPQH/iLfpABNKo5GlSqouksEYFY4 e6C9GnrB/s3kRkKBHsvVsEoBnHD+uOTGbaptJt79xBoGjQGWytWMW8wh8GQ2E1Y1 68WNM5DrxsWrFedfr52QqIxmENHgRDmSjqQAZjAfPXCAZlD0hYsWPTSC8BzM3GWk lQ2c4YmlhcDrKwPoy3FITcQSMQaetZWQS/N+lgIw4EJ2b9libdeduMxtc4rQzdnQ y8cu0LDbgLiEATpL/4dXIa8+sQ2r0/6hG62ErftriMn3eTeY7NFDmYGXCL7cHVTh Rx/3w/cWl0RuFhVtBu3zxWqhEEzLKyJtijZv83EqRQflPsN08ImPXwQE+ylaf3w= =2D89 -----END PGP SIGNATURE----- --nextPart2887140.J7R9Bl7mQN--