> Given the history of NFS security failures, and its explicit
> design as insecure, perhaps it would make more sense to build a secure
> file system on top of NFS, by using filesystem level crypto, and
> choosing to leave the transport insecure.
>
you present an interesting idea. Hows this for a rough implementation
idea: CIFS works through a loopback nfs mount, this would imply that it
*could* work over a network NFS mount, yeilding a secure network backing
store with all data transferred being encrypted and just the local client
presentation being in the clear. hmmm...
-- craig
-------------------------------------------------------------------------------
Craig I. Hagan "It's a small world, but I wouldn't want to back it up"
hagan @
cih .
com "True hackers don't die, their ttl expires"
"It takes a village to raise an idiot, but an idiot can raze a village"
Stop the spread of spam, use a sendmail condom!
http://www.cih.com/~hagan/smtpd-hacks
Follow-Ups:
References:
|
|
