Re: gnus-sync.el v2

[Steinar Bang <sb@dod.no>]

>>>>> Ted Zlatanov <tzz@lifelogs.com>:

> There's built-in security in CouchDB.  I am OK with the defaults but
> CouchDB authentication is pluggable and you can configure things any
> way you like.

I wasn't just thinking of the authentication.  I was thinking against
robustness against attacks when exposed on the Internet.

> Whether that's OK for everyone I can't say; they can always run things
> through a proxy or VPN or whatever makes sense.  For me it's good
> enough.

I'll do a little bit of research on what's possible.

SB> Ok.  What about servers?

> No, the servers are not synced.  I don't think it's possible because
> they are in the user configuration, not in newsrc.eld necessarily.  I
> could sync just the foreign servers but that's even more complicated
> between machines with possibly identical server names.

Hm... ok... (not sure I understand why this is more complicated than the
other stuff.  Will look at it later).

>>> The biggest piece missing is username+password validation and I'm
>>> working on that.

SB> Um... username+password for CouchDB?  Or are you sync'ing
SB> username+password for different servers?

> As described in
> http://wiki.apache.org/couchdb/Security_Features_Overview, I'll set up
> an admin just for the CouchDB database.

> I'll host other users if they need it.  Their sync DB can coexist with
> mine.
 
Ah, ok

One thing that will good is nice behaviour when the server can't be
contacted, ie. not hanging for a long time waiting for the server, and
no marks lost when the server can be contacted at a later stage.

This would be important when coexisting with the agent.