Database development plans

Larry,

On Tue, Jan 29, 2002 at 05:31:30PM -0500, Larry J. Blunk wrote:
> 
>    As an alternative to deprecating MAIL-FROM, have you considered sending
> a response to updates with a random cookie in it and requiring a confirmation
> message with the cookie?

I like this suggestion.

>    In regards to the MD5 fingerprint, would this be a straight MD5 hash, or
> something like the FreeBSD MD5-based password hash (which I believe supports
> passwords longer than 8 chars)?   Also, would the hash continue to be openly published?
> It would seem you would still have to deal with potential dictionary attacks.
> I understand the Perl-based RIPE server would use a "*" in place of
> the actual crypt-pw and I've been considering adding support for this in IRRd.

In my ISI/RPSL/6bone version of the perl server (=not the official RIPE
version of the perl software) the crypt-pw is indeed not shown upon
query or in the downloadable database files.

I hope this helps,

David K.
---