[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: FW: Help Desk and Ledgersmb



Chris Travers wrote:

Actually, I think it is a very elegant solution.  However, I would
wonder about security issues in scaling up.  It might work well for a
10 person company, but what if you want to add security-sensitive
information over the messaging layer?

It would completely fail.  We don't issue any security-sensitive
messages over the IRC channel.  And obviously, malicious users could
easily spoof messages.  If we were to do this seriously, we'd have to
use a message bus with guaranteed delivery and proper authentication
and security.  (I supposed you could use a PKI and encrypt/sign the
IRC messages, but that just seems silly.)

A second point is that Asterisk's AGI ought to allow you to plug into
your perl scripts with more information than you can with a system()
call.

We do use AGIs for some things, but for call-notification a system() call
was simpler.

[Anyway... we'd better get back to LedgerSMB discussions. :-)]

I've noticed mention about LedgerSMB 1.3. is it downloadable somewhere?
Well, I guess I could just pull from SVN...

Regards,

David.