Re: [Monotone-devel] encrypted netsync (was: merging in "serve raw 'automate stdio' over network")

[Matthew Nicholson]

Timothy Brownawell wrote:
> I should also mention that I'm thinking we eventually want to move to
> SSH2 for encryption/authentication (pending finding a good server-side
> SSH2 library, there only seem to be client-only libraries available
> now). This would let us only need to listen in one place for both
> netsync and stdio (and whatever else we might come up with), and would
> also mean not needing to keep our own authentication code or write our
> own encryption code (I know I've seen requests for encrypted netsync).

Why ssh2 and not ssl/tls encryption?  Just curious.  I imagine ssl 
libraries would be more prevalent.  And instead of relying on SSH for 
authentication, we could add the option of using PAM for authentication 
which is what SSH uses anyway.

--
Matthew Nicholson
matt-land.com