← Back to team overview

remote-help-assistant team mailing list archive

Re: Issues with the assistant's handling of SSH keys

 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey guys,

This is a reply to both Sebastian and Erpiu.

Based on this discussion and other changes that need to be made, I've
started a fairly major reorganisation of the assistant's code.  The end
result should look mostly the same from the user's point-of-view, except
page 3 ("General information"), which will look completely different.  I
should have something semi-functional by early next week for everyone to
pick over.  In the mean time, here are some of the changes that should
be in the new version:

* Drop support for text mode (did anyone ever use it?)
* Add NAT hole-punching support (see question #52403)
* New program to make a custom installer (like idea (1), but better)
* Lots of developer and user documentation
* A framework for proper unit testing

Both of you have good ideas, but I want to see how the new help pages
work out before I talk more about dates and things.  As to specific
questions:

Sebastian Spiess wrote:
> BTW: I suggest we try to use the community documentation part of the
> ubuntu wiki... is that possible?

Do you mean using the Wiki to develop the assistant's documentation?  If
so, I suspect that would be frowned upon.  It would probably also be
less effective than using Bazaar, since I was thinking about writing the
documentation using a tool (Doxygen) with different formatting to a
wiki.  How would you feel about writing up bits of documentation,
uploading to Launchpad, and merging with each other on a regular basis?

> Another thought was and I have the feeling I asked this already, why are
> there not only two dates? I know that more identical dates equal more
> likely the right person on the other side but seriously... what is the
> chance of getting two random dates right.
> If you need to have more security you are most likely not the main
> intended user group of the assistant - please correct me if I'm wrong
> here :-)

The four dates represent the fingerprint for an SSH public key, which is
the minimum amount of information necessary to ensure security,
according to people smarter than me :)

I wouldn't be surprised if people give up after two or three dates, but
I know how to give a very strong security guarantee with four dates and
only a weak guarantee any other way.



Erpiu wrote:
> I've jumped only recently into the project and I don't know what has
> been discussed until now. So, whenever the suggestions here above have
> already been discussed, please let me know. I don't want to make you
> re-open subjects that have already been decided.

The mailing list archive goes back to fairly early in the project
(https://lists.launchpad.net/remote-help-assistant/), and as you can
see, we haven't discussed that much.  Even if we do retread old issues,
it will be good to get it into the public record.

	- Andrew
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJwxayGRQTxegE/G4RAuxTAJ4mpL5Xu8C3evizqdhNZxbeoJRfGwCfd/wr
nZNvuXgp+W3uVdkvG4l402M=
=yuFd
-----END PGP SIGNATURE-----



Follow ups

References