[Opensim-dev] Security: multiple or the most generic?

[Stefan Andersson]

If we're going to do it 'right' from the start, then obviously, (c) as the general case and (b) as the special case should be the way to go.

 

(Easy for me to say)

 

And on a tangent, I'm closing in on having the AssetServer demanding a connection to a user server to resolve user urls. Thoughts?

 

(It baffles me we don't seem to have that already - I'm not working on the AssetInventory server as I feel its ultimate destiny is still somewhat hazy?)
 
Best regards,
Stefan Andersson
Tribal Media AB



 
> Date: Mon, 13 Apr 2009 11:25:06 -0700
> From: diva at metaverseink.com
> To: melanie at t-data.com
> CC: opensim-dev at lists.berlios.de
> Subject: Re: [Opensim-dev] Security: multiple or the most generic?
> 
> Melanie wrote:
> > Well, if a key is an arbitrary string, then it may also be a constant 
> > UUID value, e.g. the standard session id we have now, so (c) really 
> > includes (b).
> They are very different. A key is specific for one client-server pair. 
> So for each region the client visits there is a unique key that the 
> other regions might not know about. When TPs are performed on the 
> server-side, this is equivalent to (b) because the regions are acting on 
> behalf of the agent. But for client-side Teleports, this makes all the 
> difference -- the regions don't know about the other regions' keys.
> 
> > [...]
> > So, for now, (c) is the way to go, just don't forget the (b) use case. 
> > Interregion trust should remain possible.
> Right. Even though my main focus is the Hypergrid, I'm a little 
> reluctant in letting go of (b), and even of (a). The problem I'm 
> debating is how to architect OpenSim so that these different schemes can 
> co-exist without the code and configuration being a mess.
> 
> _______________________________________________
> Opensim-dev mailing list
> Opensim-dev at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-dev/attachments/20090413/9e21b6e8/attachment-0001.html>