Development discussion. Logged to https://ddnet.tw/irclogs/ Connected with DDNet's IRC channel, Matrix room and GitHub repositories — IRC: #ddnet on Quakenet | Matrix: #ddnet-developer:matrix.org GitHub: https://github.com/ddnet
Between 2018-10-31 00:00:00Z and 2018-11-01 00:00:00Z
0ecda0c Fix crash introduced by 1e2dce0. Close #1362 - Learath2
abd49dd Restore old behaviour to be safe :( - Learath2
bccf632 Merge pull request #1368 from Learath2/dd_pr_shiftcrash - def-
Server has a list of public keys, server sends challange, client signs challange + ip + some session_id sends it back, server now knows for certain which user it is
I haven't decided on how to do it on the server yet. Maybe someone else can find me a better way to mitigate MITM
18:08
Maybe doing everything over TLS
18:09
But then might aswell move the game protocol over to DTLS. But then can our weak servers support DTLS with many players. But then many other questions I didn't find the answer to yet
If you have certificate based authentication no need for a command. Ifyou are using it to send passwords you are sending them out in plain text which opens them up to pishing and allows for bad passwords which gets people hacked