[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#459778: ITP: tinydyndns -- pop-before-dyndns service using djbdns



On Tue Jan 08 08 16:44, Gerrit Pape wrote:
>tinydyndns is a simple but powerful dynamic DNS solution that uses
>djbdns.  It cooperates with the djbdns package to publish dynamic IP
>addresses authenticated through POP connections.  On successfully
>authenticated POP connections, the tinydyndns-update program manipulates
>tinydns' constant database "data.cdb" directly without rebuilding it;
>this makes the dynamic DNS solution use very few system resources.
>Using a POP service for authentication saves the work for installing
>special client software, since POP clients are available for every
>common network-aware operating system.  To provide the DNS and POP
>service, tinydyndns cooperates with djbdns, qmail, and cvm.
>
>The package is available through http://smarden.org/tinydyndns/
>
>I'm the upstream author, copyright is the 3-clause BSD license.
>
>Regards, Gerrit.
>
>

Hi Gerrit,

Your idea is good and simple.

I think that you could better the security side: you send the login/pass
in clear text and this is one of the worst aspect of the legacy POP3
protocol still very used, at least in Brasil. 

You could use SSL, for example. I don't know SSL in details, but i know
that it creates a encrypted service layer to encrypt the data and can
too do the authenticate part. You could use a assymetric key too.

I know that doing thinks like that, the simple solution could get
complicated, but IMHO, keep security in mind is important.

[]s

-- 
|
| Joel Franco Guzmán  .''`.
|  self-powered by   : :' :
|   Debian Linux     `. `' 
|                      `- 


Reply to: