From: Daniel Berlinger <daniel@...>
Date: 2002-11-06T06:19:46+09:00
Subject: Re: XML::RPC encryption

Not confuse folks with the similarity of our names... ;)

...but I believe folks have used TLS (SSL replacement) for this...

And I suspect, based on how others have treated it that it would not be directly incorporated... of course, no one is writing APIs with encryption in mind (as you propose) but I'm also not sure there any great benefit to doing it that way.

d.

> Daniel Berger wrote:
> 
> > Hi all,
> >
> > On the topic of encryption, has anyone every tried adding an encryption
> > layer (if that's the right term) into XML::RPC?  I'm thinking of a
> > simple public/private key mechanism using openssl, where the server
> > stores a list of public keys - one per authorized IP address.  Clients
> > would then pass their key as the first argument to any method call so
> > that the server could authenticate them.  Messages passed back and forth
> > would be encrypted.
> >
> > Has anyone done this?
> >
> > If so, how did it affect performance?  (I haven't actually tried it
> > yet).
> >
> > Is this something that could be optionally integrated into the main
> > XML::RPC libs, or is it best left at the application level?
> >
> > Regards,
> >
> > Dan
> 
> Quick addendum: I'm talking about a stand-alone server (in case anyone was
> gonna pipe in with Apache, etc).
> 
>