search

upm-developers / upm-server

Server for upm
0 stars 0 forks source link

Server security issue: cannot trust received messages #1

Open NoahPeeters opened 9 years ago

NoahPeeters commented 9 years ago

From @NoahPeeters on January 31, 2015 0:10

If multiple serves stay in sync and someone makes a change on one server, the server has to send the new information to all the other servers. But where does these servers know from that the server who wants to make changes is a trusted server.

My idea was that all these servers not only have a list of host but also a list of IDs that are allowed (similar to the password the packager sets to his package). That would cause, that to servers only stay in sync, if they have the domain and the ID/password of the other one.

Copied from original issue: upm-developers/upm#9

m-bra commented 9 years ago

But the server knows where a received message comes from, if he gets the message "please update package 'bla'", then he knows: google.com sent this message - but HEY it's not on my server list - thus not doing it! Why have an ID?

m-bra commented 9 years ago

Oh and I would recommend to only implement (e.g. writing doc) stuff when the issue is solved, cause they are not confirmed yet

m-bra commented 9 years ago

Well - it depends on whether we want to have TCP or not, but I'd use that so this problem is solved. And its generally safer