From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from [192.168.4.7] ([108.95.88.86]) by ur; Thu Jul 2 10:44:59 EDT 2015 In-Reply-To: <5595227C.4090504@tfwno.gf> References: <5595227C.4090504@tfwno.gf> X-Referenced-Uid: 97063 Thread-Topic: [9fans] replace p9sk1 with something better(9front) User-Agent: Type for Android MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----T8JVF0CAU1P6GA5O61A2LZDOT37U6I" Content-Transfer-Encoding: 7bit Subject: Fwd: [9fans] replace p9sk1 with something better(9front) From: Stanley Lieber Date: Thu, 02 Jul 2015 10:44:51 -0400 To: 9front@9front.org Message-ID: List-ID: <9front.9front.org> X-Glyph: ➈ X-Bullshit: SQL over AJAX extension injection manager ------T8JVF0CAU1P6GA5O61A2LZDOT37U6I Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable test=2E On Jul 2, 2015, 7:45 AM, at 7:45 AM, gracc wrote: >as per http://wiki=2E9front=2Eorg/bounties >>>replace p9sk1 with = something better > >I'm looking to start on this, does anyone have thoughts= on >improvements? >At the moment I am intending to just replace the DES ke= ys with AES but >is there any call for more structural changes? > >I was th= inking that an overhaul using public keys might be appropriate >so that the= auth server would still be a trusted key holder but without >secret keys h= aving to leave the user's machine=2E > >(9front mailing list was down so im= sending to 9fans instead, sorry if >that's a bother) ------T8JVF0CAU1P6GA5O61A2LZDOT37U6I Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable


test=2E<= !-- tmjah_g_1299e -->

On Jul 2, 2015, = at 7:45 AM, gracc <oniichan@tfwno=2Egf> wrote:
as per http://wiki=2E9front=2Eorg/bounties
replace p9sk1 with something better

I'm looking to start on this, does anyone have thoughts on impro=
vements?
At the moment I am intending to just replace the DES keys with =
AES but
is there any call for more structural changes?

I was thin=
king that an overhaul using public keys might be appropriate
so that the=
 auth server would still be a trusted key holder but without
secret keys=
 having to leave the user's machine=2E

(9front mailing list was down=
 so im sending to 9fans instead, sorry if
that's a bother)

=
------T8JVF0CAU1P6GA5O61A2LZDOT37U6I--