[Opensim-dev] [Proposal] Expanded Grid Info Availability - php

[Kurt Pudniks]

Hi all,

I'm not across all the technical details, rusty old LAMP & C++ coder here.

Would a central server running certain good php help to provide a proof of concept?

The grids could report users on an opt in basis (if both grid & user agree)... the central server notes grid, username, objects...

In my hazy view, this would allow cross-grid commerce, such that asset transfers can be held in escrow then routed to the correct avatar grid servers...?

or am i just being a totes n00b right now?! 😅

Cheers
Kurt

PS. i have 40x domains & web hosting package im doing zero with... perhaps i can host said good (centralized at least) php...? i promise not to sell any IPs to max-alpha-male-vitamins.com etc!! :P

Sent from my iPhone

> On 2 Aug 2017, at 4:47 pm, Haravikk <opensim at haravikk.me> wrote:
> 
> 
>> On 2 Aug 2017, at 00:28, David Saunders <abitar.com at gmail.com> wrote:
>> 
>> I was looking at some ideas from
>> http://opensimulator.org/wiki/Category:OSSL_Functions , but the problem is
>> how are you going to know the correct verification URL, if the regions
>> tells you what it is?   Only way if you start with a verified URL.  The
>> script it self can find out what grid its on. So you really need to know
>> the grid has set up this check for you to have any kind of confidence in
>> having the script tell where it is :)  You can send the info needed by the
>> script.
> 
> This is actually the subject of my other topic on IP/region verification, I keep forgetting that I separated it into two topics thinking that simplified things 😏
> Basically, imagine a script sends you the following:
> 
>    X-OpenSim-Location: x-grid-info://example.org:9000/My%20Region/1/2/3
>    X-OpenSim-Region-Address: haravikk.com:9001
> 
> What your web-service could then do is send a request like:
> 
>    http://example.org:9000/verify_region?region=My%20Region&address=haravikk.com%3A9001
> 
> If the grid returns a positive response then I know that not only does the grid exist, but it has confirmed that a region by the given name is hosted by a machine at the given address, thus I know that the request came from a legitimate source (or at least, that the grid is willing to tell me so). Basically the idea is that grids would gain a /get_grid_info style service, but for verifying regions.
> 
> I created a wiki article on region verification here: http://opensimulator.org/wiki/User:Haravikk_Mistral/RegionVerification
> And there's a separate topic on the mailing list under Verifying IP and Region.
> 
> I thought I'd keep the issues separate as the main thing I wanted to discuss here is whether people agree that making grid info more widely available is a good idea, or if there are real potential security/privacy issues. If that part is okay then the idea is to build upon it.
> _______________________________________________
> Opensim-dev mailing list
> Opensim-dev at opensimulator.org
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev