Re: [GNUnet-developers] port knocking?

[Christian Grothoff]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday 27 February 2004 10:11 am, Alexander Winston wrote:
> Would it be possible to generate a unique port knocking sequence every
> time that GNUnet is run so that only other peers know what the sequence
> is?

It would be possible to change the sequence every time, but not desireable.  
Not only may this require changing the firewall config (for the really 
paranoid) but also all 'old' HELO advertisments would no longer work, 
resulting in even longer times to connect.

Besides, I fail to see the advantage of frequent changes to the sequence.  
Only other peers knew the old sequence, so where's the advantage in changing 
it?  (Note that it is still a per-peer sequence, but for the same peer, the 
sequence would not change).

Christian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQFAP2y89tNtMeXQLkIRAuUmAJ9PF9laFgdlFsKII6V/1BFxu3PTwACgjooI
T8KgI8lAHh5SfsTzinFJcD0=
=GF8T
-----END PGP SIGNATURE-----