[volunteergrid2-l] Gateway Passwords

Jody Harris jharris at harrisdev.com
Mon Jul 4 09:13:42 PDT 2011


I have a strong negative reaction to universal passwords. As a rule, I
view "open secrets" with great suspicion.

For one thing, we don't know that we won't eventually have a member
who will abuse the grid. If we go with the "public secret" model,
everyone will have to change their password if we are pushed to
forcing one member out.

There are other points of failure for the public secret model. Other views?

j
----
- Think carefully.



On Sun, Jul 3, 2011 at 8:44 AM, Shawn Willden <shawn at willden.org> wrote:
> Is there a reason we need per-user passwords?  It seems like the simplest
> thing to do would just be to have a single password and put it on the
> protected area of the wiki.
>
> On Sun, Jul 3, 2011 at 8:18 AM, Brad Rupp <bradrupp at gmail.com> wrote:
>>
>> One discussion that I do remember us having and that we never resolved was
>> what do do with the passwords on the gateways.  My gateway has passwords for
>> some of the users but not all.  The password was generated by me and sent
>> privately to the particular user.  We discussed using Tahoe to distribute
>> the passwords and then a script that could put them all together into a
>> format that Apache could understand.    This would allow individual users
>> the ability to generate and/or change their own password.  I think that is
>> as far as we got on this.  Any other thoughts on this topic?
>>
>> Thanks,
>>
>> Brad
>>
>> _______________________________________________
>> volunteergrid2-l mailing list
>> volunteergrid2-l at tahoe-lafs.org
>> http://tahoe-lafs.org/cgi-bin/mailman/listinfo/volunteergrid2-l
>> http://bigpig.org/twiki/bin/view/Main/WebHome
>
>
>
> --
> Shawn
>
> _______________________________________________
> volunteergrid2-l mailing list
> volunteergrid2-l at tahoe-lafs.org
> http://tahoe-lafs.org/cgi-bin/mailman/listinfo/volunteergrid2-l
> http://bigpig.org/twiki/bin/view/Main/WebHome
>


More information about the volunteergrid2-l mailing list