[p2p-hackers] P2P Authentication

[Lemon Obrien]

why don't you just use ssl or some type of encrypted password.

Wes Felter <wesley at felter.org> wrote:Frank Moore wrote:

> I want a client to join a P2P network after authenticating itself to a 
> streaming server.
> The server needs to authenticate that the client is not a rogue who will 
> subvert the stream.

In theory the solution to this problem is TCG remote attestation, but 
you can't actually use it (yet). The practical half-solution is to 
obfuscate your protocol as much as you can. It's not clear to me whether 
a shared secret or PKI provides more obfuscation; certainly PKI is 
more complex and computationally-intensive.

Wes Felter - wesley at felter.org

_______________________________________________
p2p-hackers mailing list
p2p-hackers at zgp.org
http://zgp.org/mailman/listinfo/p2p-hackers
_______________________________________________
Here is a web page listing P2P Conferences:
http://www.neurogrid.net/twiki/bin/view/Main/PeerToPeerConferences



You don't get no juice unless you squeeze
Lemon Obrien, the Third.
		
---------------------------------
 Yahoo! FareChase - Search multiple travel sites in one click.  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://zgp.org/pipermail/p2p-hackers/attachments/20051025/a22562d6/attachment.html