Development discussion. Logged to https://ddnet.tw/irclogs/ Connected with DDNet's IRC channel, Matrix room and GitHub repositories โ IRC: #ddnet on Quakenet | Matrix: #ddnet-developer:matrix.org GitHub: https://github.com/ddnet
Between 2020-02-25 00:00:00Z and 2020-02-26 00:00:00Z
Alice joins fake server hosted by Eve, Alice starts authenticating, Eve asks the actual server for a serverToken passes it along to Alice, Alice authenticates to the authServer, Alice sends authResult to Eve's server, Eve just uses it to login on the actual server
@Learath2 Another idea. Alice authenticates to the authServer with serverToken + IP+Port of teeworlds server.
Then alice sends authResult to Eve's sever.
But when Eve sends it to the real server it won't be accepted.
Because the real server validates accessToken+IP+Port. (But Alice issued token for another fake IP+port)
@3da I'll think about it, I'm outside rn, but I feel there is a problem there with the reliability of ip and maybe with the manipulability of the authresult
09:37
A random token isnt the best, maybe you could instead use an encrypted token, information in which we can trust
A random token isnt the best, maybe you could instead use an encrypted token, information in which we can trust
@Learath2 to encrypt something sounds good. But currently I can't imagine how to use it in proper way. I don't have enough exp. in cryptography. So I am ready for your advices
This probably changes nothing in protocol. Because it doesn't matter what token is. If the auth server generates random token will it be better to encrypt it? Or the token shouldn't be random?
10:32
if the basic random is bad maybe better to use "cryptographic random"?
Hi,
CMake configuration fails after going through these instructions. Here are the logs:
```
The C compiler identification is MSVC 19.24.28316.0
The CXX compiler identification is MSVC 19.24.28316.0
Check for working C compiler: C:/Program Files (x86)/Microsoft Visual Studio/2019/Community/VC/Tools/MSVC/14.24.28314/bin/Hostx64/x64/cl.exe
Check for working C compiler: C:/Program Files (x86)/Microsoft Visual Stud...
@MoRdex Everything you need to host something like ddnet is public on the ddnet discord, we do not provide support with it, if someone here wants to help with it they will