Mailing-List: contact river-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: river-dev@incubator.apache.org
Received-SPF: pass (athena.apache.org: local policy)
From: Michal Kleczek <michal.kleczek@xpro.biz>
Organization: XPro Sp. z o. o.
To: river-dev@incubator.apache.org
Subject: Re: Towards Internet Jini Services (trust)
Date: Mon, 4 Oct 2010 14:25:19 +0200
User-Agent: KMail/1.13.2 (Linux/2.6.31-22-generic; KDE/4.4.2; x86_64; ; )
References: <4C9DB5BF.8090307@zeus.net.au>
 <201010041354.59557.mkleczek@contour-technology.com>
 <4CA9C3E2.7050105@qcg.nl>
In-Reply-To: <4CA9C3E2.7050105@qcg.nl>
MIME-Version: 1.0
Content-Type: Text/Plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <201010041425.19581.michal.kleczek@xpro.biz>

On Monday 04 of October 2010 14:09:06 Sim IJskes - QCG wrote:
> On 10/04/2010 01:54 PM, Michal Kleczek wrote:
> >> This is why TLS is so important. With TLS you have authentication and
> >> encryption in one solution. You can configure the level of encryption
> >> and the mechnisms for authentication differently for each application.
> >> 
> >> It provides you with an end-to-end solution, so you can use any insecure
> >> path you like.
> > 
> > So you meant TLS between the client and the service in your previous
> > post? But how can the client communicate with the service before
> > unmarshalling the service proxy?
> 
> Before i can start unmarshalling, i need to load the class from the
> classloader. This classloader connects to the code providing server. The
> classloader and server handshake, and exchange certificates. If anything
> is fishy, the connection is severed, and whe only have lost the few
> bytes from the handshake.

Sure - I understand that.
My point is actually that it requires trust relationship with the code server. 
In other words - for me to securely communicate with you we both have to trust 
a single third party (the code server). I don't want that - I just trust you 
but neither you nor I have the necessary infrastructure to have a trusted code 
server - can we still securely communicate using GMail as our code server?.

Michal