Re: some requirements

[Tom Vogt <tom@lemuria.org>]

Andreas Jellinghaus <aj@dungeon.inka.de> wrote:
>    nfs is insecure, and without IPsec or some other way to secure is:
>    where is a network filesystem for linux ? (ok, maybe nfs v4 will
>    help, but who can wait that long ?)

coda?


>    is dns ready to serve keys for IPsec ? IIRC there was some way to
>    store the public keys in dns.

correct, and this is the much better approach. bind 8 can do it. you can,
of course, also have a spec that says "on my subnets, the public key to
every machine is stored in the TXT entry to every host" or something like
that.


>  - improved ssl ? 
>    nearly no server allows authentication via ssl certificate.
>    also nearly no server allows the server key be encrypted with
>    a password, and the certificate in an extra file. apache is fine,
>    but stunnel/sslwrap/... ?

wasn't s/key made for this? I'm desperately behind on reading up on s/key,
but that's what I thought it was for.


>  - ssl managemant ? openssl tools are not very easy to use.

write the code and most distros will be happy to include it.


-- 
"The net treats censorship as a malfunction and re-routes around it."
(John Gilmore)
-
Securedistros: A common list for all secured Linux distributions
Archive:       http://humbolt.nl.linux.org/lists/