Date: Fri, 11 Aug 2006 11:49:26 -0500 From: Paul Schmehl <pauls@utdallas.edu> To: Matthew Seaman <m.seaman@infracaninophile.co.uk> Cc: "Marc G. Fournier" <scrappy@freebsd.org>, Nikolas Britton <nikolas.britton@gmail.com>, freebsd-questions@freebsd.org Subject: Re: BSDstats Project v2.0 ... Message-ID: <44DCB516.40501@utdallas.edu> In-Reply-To: <44DCAFFE.6090400@infracaninophile.co.uk> References: <20060807003815.C7522@ganymede.hub.org> <20060808201359.S7522@ganymede.hub.org> <44D91F02.90107@mawer.org> <20060808212719.L7522@ganymede.hub.org> <20060809072313.GA19441@sysadm.stc> <20060809055245.J7522@ganymede.hub.org> <44D9F9C4.4050406@utdallas.edu> <20060809130354.U7522@ganymede.hub.org> <ef10de9a0608091700x6cc268ear6566c26f93f1fdf0@mail.gmail.com> <ef10de9a0608100327r5b402d64xc4eef38a4f61ba4e@mail.gmail.com> <ef10de9a0608110342q62f81fc8p5fb4b4df37595593@mail.gmail.com> <20060811100914.U7522@ganymede.hub.org> <44DCA340.2050204@utdallas.edu> <44DCAFFE.6090400@infracaninophile.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] Matthew Seaman wrote: > Paul Schmehl wrote: > >> 1) encrypt the data being fed to your systems by the script - this >> should be relatively easy using keys and would ensure that a man in the >> middle attack would fail. You can connect using ssh and a unique key >> without having to reveal passwords to anyone. > > Uh... HTTPS surely? Because it's relatively simple to implement on both > client and server, doesn't require extra software installed on every client > beyond the monthly stats script itself and because of the way that HTTPS > uses a one-sided Diffie Helmann exchange to create session keys which means > that you don't have any trouble with key management on the many thousands > of client boxes out there... > I defer to your obviously greater experience and wisdom. :-) I would note that these issues appear to be impacting the project. As of right now, there are only 1612 systems reporting in, and I suspect there are a much greater number of systems distributed throughout the computing universe. Certainly some can be attributed to the newness of the project and the small amount of promotion done to date, but I can't help but think that at least some of it is due to hesitancy on the part of some to submit their data. For my part, I've submitted two public hosts. I have four others I will not submit until I'm certain the data are securely transmitted and stored. Surely I'm not alone? -- Paul Schmehl (pauls@utdallas.edu) Adjunct Information Security Officer The University of Texas at Dallas http://www.utdallas.edu/ir/security/ [-- Attachment #2 --] 0 *H 01 0 + 0 *H N00AA = e0 *H 01 0 UUS10U VeriSign, Inc.1<0:U 3Class 2 Public Primary Certification Authority - G21:08U 1(c) 1998 VeriSign, Inc. - For authorized use only1 0 U VeriSign Trust Network0 990331000000Z 090330235959Z01'0%U The University of Texas System1 0 U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)991200U )Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CA00 *H 0 "zھ6p`0`S/5ɨ)=d}чTxxLIA ҥ~BQNths]1)%c#Dj9FXúKzI#C2 00)U "0 0 10UPrivateLabel1-1400 `HB0DU =0;09 `HE0*0(+ https://www.verisign.com/RPA0U 0 0 U 0 *H S ܲ P8yISo̲z|_a^_Zҕ"TTTTi!79]H9Y$ C܃tj 11#%,QYҴT 0s0ܠ 08'ƚE0 *H 01'0%U The University of Texas System1 0 U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)991200U )Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CA0 060721000000Z 070721235959Z01'0%U The University of Texas System1-0+U $The University of Texas at Dallas CA1F0DU =www.verisign.com/repository/CPS Incorp. by Ref.,LIAB.LTD(c)9910U Mail Stop - UTD10U Paul Schmehl1!0 *H pauls@utdallas.edu00 *H 0 PL;帽NC4jDQB Tn"ΕQ#>D2+ٳE:z8""pXX $3\ Z%n;vwfcŀbF 00 U 0 0 U 0pauls@utdallas.edu0$U 00 `HE00++ https://www.verisign.com/rpa-kr0+0NOTICE: Private key may be recovered by VeriSign's customer who may be able to decrypt messages you send to certificate holder. Use is subject to terms at https://www.verisign.com/rpa-kr (c)99.0 `HB0uU n0l0jhfdhttp://onsitecrl.verisign.com/TheUniversityofTexasSystemTheUniversityofTexasatDallasCA/LatestCRL.crl0 U 0 U %0++0 *H 5 kuCO\GEzB?^2&?JF⠉ЪuPP̲+%&mTh}Q+bWqXXJȨV6U!00`G @±- _=c0 *H 01'0%U The University of Texas System1 0 U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)991200U )Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CA0 060721000000Z 070721235959Z01'0%U The University of Texas System1-0+U $The University of Texas at Dallas CA1F0DU =www.verisign.com/repository/CPS Incorp. by Ref.,LIAB.LTD(c)9910U Mail Stop - UTD10U Paul Schmehl1!0 *H pauls@utdallas.edu0"0 *H 0 lSvNê7a_^ e7@m#eqb fjl2 O'R,ǹg<ҚS҃0}F,hz lNrFxlPe9TS$ 1Ǥ=:.niJܮmd)1t'fm8Z?P \/(=&h<|QqB&Pv)cfO>96S)tU_p\Z? I] KezcƷ! 00 U 0 0 U 0pauls@utdallas.edu0$U 00 `HE00++ https://www.verisign.com/rpa-kr0+0NOTICE: Private key may be recovered by VeriSign's customer who may be able to decrypt messages you send to certificate holder. Use is subject to terms at https://www.verisign.com/rpa-kr (c)99.0 `HB0uU n0l0jhfdhttp://onsitecrl.verisign.com/TheUniversityofTexasSystemTheUniversityofTexasatDallasCA/LatestCRL.crl0 U 0 U %0++0 *H =Pjcr:%s#N ܒEȴRB)'W Tѹv>!ɑog<\/ fbh!`ؓ?/)#D3?J}36'3uzbnK u9 | MG 10001'0%U The University of Texas System1 0 U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)991200U )Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CAG @±- _=c0 + 0 *H 1 *H 0 *H 1 060811164926Z0# *H 1z{?w{s z< 0R *H 1E0C0 *H 0*H 0 *H @0+0 *H (0 +71001'0%U The University of Texas System1 0 U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)991200U )Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CA 08'ƚE0 *H 101'0%U The University of Texas System1 0 U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)991200U )Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CA 08'ƚE0 *H ˞L_zu%1Rx^lA| ]p,QIKDf"* DPtY:=I柱&vK4ڮI 3*84Y=e 3G4f A8oѸζ-{RmG)~5Ob] gk<f,4/2zxoA 6PB@bjb^pϐJĒv!C,-#%w@Q;e,gHԙR)L
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44DCB516.40501>