Re: Θέμα: Re: Θέμα: Θέμα: Re: NoC atAuth for authentication purposes only

Steve Platt <[email protected]> Wed, 15 Aug 2007 17:12:52 +0100
Newsgroups gmane.network.nocat
Message-ID <[email protected]>
> ...
> disencourage the NoCatAuthServer being on the same machine as the gateway
> why is that?

I think this is a question of security.

I think that the gateway machine is very exposed/vulnerable but that the 
authentication server can be put behind a firewall and is thus much less 
vulnerable to attack so it's a safer place to access authentication 
information.

The two parts communicate through the firewall using encrypted (HTTPS) traffic 
and PGP-signed messages ...

Another reason to have the two parts on separate systems is that it's less 
confusing for you as the adminstrator :-)

Steve