]] Peter Palfrader 

| - install sendfile/saft on all machines so you can do
|     sendfile foo.tar.gz [EMAIL PROTECTED]
| 
|   Unfortunately sendfile doesn't use crypto, so who knows what happens
|   to the stuff you send.  And it's yet another network facing server - I
|   don't know if anybody ever did a real audit on it either.  Also, I
|   have no idea if it's still actively maintained these days.  Lack of
|   crypto seems to suggest that there certainly isn't any new development
|   going on, and hasn't in ages.

[...]

| What other options did we forget?

NFS over OpenVPN between all debian hosts and a directory which is mode
1777 ?  Sendfile over OpenVPN would also work and be less insecure
(though still no auth).

Passphraseless keys limited to sftp would also be an option, but on a
per-user basis.

-- 
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to