[db-wg] help

2012/2/15 <db-wg-request at ripe.net>

> Send db-wg mailing list submissions to
>        db-wg at ripe.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        https://www.ripe.net/mailman/listinfo/db-wg
> or, via email, send a message with subject or body 'help' to
>        db-wg-request at ripe.net
>
> You can reach the person managing the list at
>        db-wg-owner at ripe.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of db-wg digest..."
>
>
> Today's Topics:
>
>   1. Suggestion for a way to retrieve filtered objects
>      (Anders Mundt Due)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 14 Feb 2012 18:10:33 +0100
> From: "Anders Mundt Due" <anders.mundt.due at uni-c.dk>
> Subject: [db-wg] Suggestion for a way to retrieve filtered objects
> To: "Database WG" <db-wg at ripe.net>
> Message-ID:
>        <80D52320F10F9143AF3670B571348EEA01F497BB at LGBEXCHANGE01.unic.local>
> Content-Type: text/plain;       charset="UTF-8"
>
> Hi there,
>
> We just had a problem with the RFC3068-MNT object, from what I can see, if
> you have an object with at least one
>  auth: MD5 ...
>
> Only people that have one of the passwords can see the object in the
> webupdater and get the full object to manipulate the object.
>
> So now, instead of having a chance to get rid of shared
> passwords/passphrases, everybody needs to have one, because of the way
> objects are filtered.
>
> Only idea I've had so far, would be that there should be a way to request
> an object in a way where I can authenticate with my PGPKEY, for instance
> using email and not a webbrowser, so I'd sign a mail requesting an object,
> with a key that would be listed as authentication in the object I request,
> and that would return the unfiltered object to me.
>
> Of course, the other solution is to just get hold of all the people with
> an auth: MD5 line and make them take it out, that way you can get the full
> object without authenticating on the webupdater.
>
> I'm not sure if my thought here is useable, good or practical. But it
> someone can come up with a brilliant way to make shared objects of this
> kind smoothly, I suspect the people implementing the database will be eager
> to hear about it, and at the very least the people behind RFC3068-MNT will
> be gratefull.
>
> /Anders
> Forskningsnettet dk.denet
>
> End of db-wg Digest, Vol 6, Issue 2
> ***********************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/db-wg/attachments/20120216/ab98be60/attachment.html>