Crossfire Mailing List Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Misc notes/thoughts.





On Wed, 13 Dec 1995, GESTIONNAIRE DU Casino wrote:

> On Mon, 11 Dec 1995, Tadah wrote:
> 
> > ATTENTION all programmers..  Idea here.. :>
> > Why not have encrypted RSA player files kept on the players computer?
> > Netrek does something like this with its clients so that people can't mod 
> > clients and cheat.  Why not do this with player files, and to what 
> > advantage?  It would be great to be able to move your player to other 
> > servers should a server go down, become slow, or whatever.  No?
> > Well, anyway.  Just an idea.. :>
> 
> No no no... It would be too easy to cheat. Imagine : I install a server 
> on my machine, and create a map with free armor/spells/money/etc. I get a 
> munchkin character, then move it to the ultra-strict server where you 
> play, and bash everythng about... 

Actually.  That is handled quite easily with Netrek.  Its true they don't 
share player information with other servers (I'll work on them soon too 
<G>), but they let people write their own clients, and there are clients 
that are made for the purpose of cheating, called Borg Clients.  Anyway, 
we then have what is called RSA Blessed clients and servers.  Basicly you 
can make all the clients you want, and run them on servers that don't 
insist on Blessed clients.  But if you want to make a client to run on 
all servers, the code needs to be approved, etc.  What I'm purposing here 
is that each player file be encrypted with a server key.  If I go and 
play on your server, then later I want to move to another server, say 
popular.edu, it will read my player file, find a server key that is not 
in its list of keys, and refuse my player file.  Basicly, each server has 
a list of keys they accept and/or don't accept (whatever the owner of the 
server wants) and it'll check for that key in the player file.  From that 
point maybe we could go a step further and the server that now approves 
of this player file sends it its server key, and so forth.  SO then if I 
move to popular2.edu which also doesn't support your server, so it 
refuses the first key listed, it does support popular.edu's key and lets 
me play, as well as writes its key to the player file.

SO  um..  still sound stupid? :>

-Matt