Re: Server ID not valid Error

Daniel Kahn Gillmor <dkg-QLrU/[email protected]> Thu, 27 Nov 2008 12:37:17 -0500
Newsgroups gmane.network.silc.devel
Message-ID <[email protected]>
On Wed 2008-11-26 14:40:18 -0500, Skywing wrote:

> There is a not-documented public_ip = bla; that you can set in the
> primary listener config block which overrides the bind IP as the IP
> used to generate the server ID.

Note that there's also been some discussion of relaxing (from MUST to
SHOULD) the requirement to do server- IP matching (which IMHO adds
very little security on top of proper cryptographic controls):

  https://lists.silcnet.org/pipermail/silc-devel/2008-September/002160.html

It's not clear to me where this proposal stands, or even where the
draft of the revised document lives, though.

> _______________________________________________________________________
> Info:    https://lists.silcnet.org/mailman/listinfo/silc-announce
> Archive: https://lists.silcnet.org/pipermail/silc-announce
> FAQ:     http://silcnet.org/support/faq/

Why does the silc-devel list use the silc-announce footer?

    --dkg

_______________________________________________________________________
Info:    https://lists.silcnet.org/mailman/listinfo/silc-announce
Archive: https://lists.silcnet.org/pipermail/silc-announce
FAQ:     http://silcnet.org/support/faq/
signature.asc (application/pgp-signature, 826 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iQIVAwUBSS7azczS7ZTSFznpAQL+hxAAj7bqIxxq2qOBKRkDe/8aaZRg1Dd2MP2q
V4F114/jbTRI1FqN9c6exa/iy6Wu8IWBRFG75QjLSKF0DDJ96bwOEqH8UYTdaL3Y
v7v2W69hYoGjmiFc0oZWQg13QqjJ9gA0aJR05v+ubEHhtXx6oGlP4RYVth3yT8Zk
jIMT992qro58ErO46cE33QvpdmibKuCchA1lpDdHopsKeK3CfU/jYyihwqD/0ux5
q3tl8KxLqwiOrgIrlNM1Kp7SPNQ7SGzygSY66WVtDRbOy8pQMqrOy+36H0qgVGxz
v7D70AsKByC+aPmTKFhX35fgXmJeoGwIBpT5OLla3+NkWe47FsPm5oBp0Wa/LvQ7
3mDUYToVzVWNFOhegl1K19jQ5qLzotR/yqid/cDuAv+Z2zlXJYphzTqU1aAO5XNa
z3x2CCxcl2KFhNMUq0xsbRHKunqXVJVIUa4SzEHk3vFknpQjKM8+47od6CPyAXKm
PX5+fzpvqkEDSk9+0H1wdQMQG7aubdg8uF+S2SZC9J1d3L7Ou1uQqFEMf5gLScIc
P2jx6DqvBA4BbwgWB+8MObjvk/9lGJc/0QH8/KhRohPxSFZt3FrYSdPpSPZtStYi
fWHCwiDoRTQ0gvR6QSLBSmiC3jUI/GofWtaFe4xA3+DsaQVZxPpU+BquAx7QvAT1
K+Pz1n0rf8A=
=kPmi
-----END PGP SIGNATURE-----