Viewer Authentication Critique - Revision history

Teravus Ousley: /* Cons */

2008-01-10T06:49:59Z

Cons

← Older revision		Revision as of 23:49, 9 January 2008
Line 50:		Line 50:
	*** In fact allowing that was a security flaw recently found and fixed in the SL client. :(		*** In fact allowing that was a security flaw recently found and fixed in the SL client. :(
	** It will raise problems for those running alternative (e.g. OpenSim) grids, and also have impact on the dicussions for a future open grid		** It will raise problems for those running alternative (e.g. OpenSim) grids, and also have impact on the dicussions for a future open grid
			*** Just a comment here: The latest release client logs into OpenSim Successfully - [[User:Teravus Ousley\|Teravus Ousley]] 22:49, 9 January 2008 (PST)
	<br>		<br>
	* It is suggested that the viewer will embed the web form within the viewer -		* It is suggested that the viewer will embed the web form within the viewer -

Henri Beauchamp: /* Signatories */

2007-12-06T23:39:03Z

Signatories

← Older revision		Revision as of 16:39, 6 December 2007
Line 162:		Line 162:
	* [[User:Seg Baphomet\|Seg Baphomet]] 09:33, 8 October 2007 (PDT)		* [[User:Seg Baphomet\|Seg Baphomet]] 09:33, 8 October 2007 (PDT)
	* [[User:Ahzzmandius Werribee\|Ahzzmandius Werribee]] 10:06, 6 December 2007 (PST)		* [[User:Ahzzmandius Werribee\|Ahzzmandius Werribee]] 10:06, 6 December 2007 (PST)
			* [[User:Henri Beauchamp\|Henri Beauchamp]] 00:40, 7 December 2007 (CET)

Ahzzmandius Werribee at 18:06, 6 December 2007

2007-12-06T18:06:50Z

← Older revision		Revision as of 11:06, 6 December 2007
Line 161:		Line 161:
	* [[User:Melanie Milland\|Melanie Milland]] 16:23, 2 October 2007 (PDT)		* [[User:Melanie Milland\|Melanie Milland]] 16:23, 2 October 2007 (PDT)
	* [[User:Seg Baphomet\|Seg Baphomet]] 09:33, 8 October 2007 (PDT)		* [[User:Seg Baphomet\|Seg Baphomet]] 09:33, 8 October 2007 (PDT)
			* [[User:Ahzzmandius Werribee\|Ahzzmandius Werribee]] 10:06, 6 December 2007 (PST)

Gibson Willis: /* Summary */

2007-11-01T14:19:20Z

Summary

← Older revision		Revision as of 07:19, 1 November 2007
Line 9:		Line 9:
	== Summary ==		== Summary ==

	There are currently no known password capturing third party viewers in the wild, and a third party viewer requires such a privilege level of access to an account anyway that if you don't trust it with your username and password, you shouldn't be running it anyway. The mechanism proposed, however, is more prone to phishing attacks in ~~the~~ it would acclimatise users to starting the viewer via a web page. At present most password compromises are probably due to weaknesses in the current protocol challenge response, due to allowing weak passwords, due to security compromises in the LL websites or due to the usual phishing e-mails (which are likely to be increased by the proposed method rather than decreased).		There are currently no known password capturing third party viewers in the wild, and a third party viewer requires such a privilege level of access to an account anyway that if you don't trust it with your username and password, you shouldn't be running it anyway. The mechanism proposed, however, is more prone to phishing attacks in that it would acclimatise users to starting the viewer via a web page. At present most password compromises are probably due to weaknesses in the current protocol challenge response, due to allowing weak passwords, due to security compromises in the LL websites or due to the usual phishing e-mails (which are likely to be increased by the proposed method rather than decreased).

	Providing a single authentication mechanism for LL (and third party) websites would be an improvement to multiple backend copies of username and password, however this could be implemented without touching the viewer authentication method. Support for OpenID and other identity metasystems would increase the flexibility and offer features such as brokered identity verification. However, these would only be part of the solution, and although the proposed mechanism would provide a way for future support of these, there are other ways this could be achieved. Future support for OpenID is perhaps a topic for a seperate discussion and debate, but a open debate on this should happen.		Providing a single authentication mechanism for LL (and third party) websites would be an improvement to multiple backend copies of username and password, however this could be implemented without touching the viewer authentication method. Support for OpenID and other identity metasystems would increase the flexibility and offer features such as brokered identity verification. However, these would only be part of the solution, and although the proposed mechanism would provide a way for future support of these, there are other ways this could be achieved. Future support for OpenID is perhaps a topic for a seperate discussion and debate, but a open debate on this should happen.

	There seems to be no real demand to ~~synchronise~~ the authentication of the viewer with authentication on the SL web site (account, forums, etc.), and any benefits gained would be negated by the problems this would cause anyone running alts (e.g. for in world permissions testing etc.) or multiple viewers (e.g. main, test and firstlook). It also raises problems for those running OpenSim based Grids, and may also cause difficulties further down the line as regards the new architecture discussions. A relatively simpler mod to the web site could prevent the account details for a different alt displaying when the account menu options are selected in the client. There is an argument that ~~the seperating~~ the passwords and logon for the forums would actually improve security.		There seems to be no real demand to synchronize the authentication of the viewer with authentication on the SL web site (account, forums, etc.), and any benefits gained would be negated by the problems this would cause anyone running alts (e.g. for in world permissions testing etc.) or multiple viewers (e.g. main, test and firstlook). It also raises problems for those running OpenSim based Grids, and may also cause difficulties further down the line as regards the new architecture discussions. A relatively simpler mod to the web site could prevent the account details for a different alt displaying when the account menu options are selected in the client. There is an argument that separating the passwords and logon for the forums would actually improve security.

	The suggestion of ~~provided~~ an embedded way of displaying the web form within the viewer so that you will not have to always start the viewer from a web browser is a non-starter, not just because of problems with the current code in handling web proxies, but because it would be very easy for the embedded web form handling code to log the form data before POSTing to the web site thus undermining any benefits gained.		The suggestion of providing an embedded way of displaying the web form within the viewer so that you will not have to always start the viewer from a web browser is a non-starter, not just because of problems with the current code in handling web proxies, but because it would be very easy for the embedded web form handling code to log the form data before POSTing to the web site thus undermining any benefits gained.

	Overall, the additional development time both ~~with~~ LL and for external developers doesn't seem to warrant the promoted benefits.		Overall, the additional development time both for LL and for external developers doesn't seem to warrant the promoted benefits.

	It was also noted that consideration should be given when considering enhancements to the security/authentication models whether these should be optional - allowing users to make their own risk/convenience decisions.		It was also noted that consideration should be given when considering enhancements to the security/authentication models whether these should be optional - allowing users to make their own risk/convenience decisions.

Seg Baphomet: /* Signatories */

2007-10-08T16:33:32Z

Signatories

← Older revision		Revision as of 09:33, 8 October 2007
Line 160:		Line 160:
	* [[User:Odysseus Fairymeadow\|Odysseus Fairymeadow]] 13:58, 1 October 2007 (PDT)		* [[User:Odysseus Fairymeadow\|Odysseus Fairymeadow]] 13:58, 1 October 2007 (PDT)
	* [[User:Melanie Milland\|Melanie Milland]] 16:23, 2 October 2007 (PDT)		* [[User:Melanie Milland\|Melanie Milland]] 16:23, 2 October 2007 (PDT)
			* [[User:Seg Baphomet\|Seg Baphomet]] 09:33, 8 October 2007 (PDT)

Dzonatas Sol: /* Note */

2007-10-03T19:07:40Z

Note

← Older revision		Revision as of 12:07, 3 October 2007
Line 5:		Line 5:
	== Note ==		== Note ==

	It was not explicit in the original article what the motivations behind LL's proposed new authentication system are. The goals (Security, Flexibility, Persistence) and benefits listed here are what SLDev believed them to be based on the original description and e-mail discussions. One of the less stated but said higher priority goals[https://lists.secondlife.com/pipermail/sldev/2007-October/005546.html] is that of anti-fraud measures, but it is not practical to critique unpublicized or miscommunicated anti-fraud plans. This article, therefore, still lacks an essential critique ~~to prevent~~/~~detect fraud on proposed changes~~.		It was not explicit in the original article what the motivations behind LL's proposed new authentication system are. The goals (Security, Flexibility, Persistence) and benefits listed here are what SLDev believed them to be based on the original description and e-mail discussions. One of the less stated but said higher priority goals[https://lists.secondlife.com/pipermail/sldev/2007-October/005546.html] is that of anti-fraud measures, but it is not practical to critique unpublicized or miscommunicated anti-fraud plans. This article, therefore, still lacks an essential critique about fraud prevention/detection as possibly desired when solicited.

	== Summary ==		== Summary ==

Dzonatas Sol: /* Note */ Added statement based on various comments, like SLDev

2007-10-03T19:04:34Z

Note: Added statement based on various comments, like SLDev

← Older revision		Revision as of 12:04, 3 October 2007
Line 5:		Line 5:
	== Note ==		== Note ==

	It was not explicit in the original article what the motivations behind LL's proposed new authentication system are. The goals (Security, Flexibility, Persistence) and benefits listed here are what SLDev ~~believe~~ them to be based on the original description and e-mail discussions.		It was not explicit in the original article what the motivations behind LL's proposed new authentication system are. The goals (Security, Flexibility, Persistence) and benefits listed here are what SLDev believed them to be based on the original description and e-mail discussions. One of the less stated but said higher priority goals[https://lists.secondlife.com/pipermail/sldev/2007-October/005546.html] is that of anti-fraud measures, but it is not practical to critique unpublicized or miscommunicated anti-fraud plans. This article, therefore, still lacks an essential critique to prevent/detect fraud on proposed changes.

	== Summary ==		== Summary ==

Matthew Dowd: /* Note */

2007-10-03T18:13:10Z

Note

← Older revision		Revision as of 11:13, 3 October 2007
Line 5:		Line 5:
	== Note ==		== Note ==

	It was not ~~explicitn~~ in the original article what the motivations behind LL's proposed new authentication system are. The goals (Security, Flexibility, Persistence) and benefits listed here are what SLDev believe them to be based on the original description and e-mail discussions.		It was not explicit in the original article what the motivations behind LL's proposed new authentication system are. The goals (Security, Flexibility, Persistence) and benefits listed here are what SLDev believe them to be based on the original description and e-mail discussions.

	== Summary ==		== Summary ==

Matthew Dowd: /* Note */

2007-10-03T11:22:18Z

Note

← Older revision		Revision as of 04:22, 3 October 2007
Line 5:		Line 5:
	== Note ==		== Note ==

	It was not ~~explicit~~ what the ~~goals~~ behind LL's proposed new authentication system are. The goals (Security, Flexibility, Persistence) and ~~beneifits~~ listed here are what SLDev believe them to be based on the original description and e-mail discussions.		It was not explicitn in the original article what the motivations behind LL's proposed new authentication system are. The goals (Security, Flexibility, Persistence) and benefits listed here are what SLDev believe them to be based on the original description and e-mail discussions.

	== Summary ==		== Summary ==

Matthew Dowd: Changed Objectives to Benefits.

2007-10-03T11:18:36Z

Changed Objectives to Benefits.

← Older revision		Revision as of 04:18, 3 October 2007
Line 5:		Line 5:
	== Note ==		== Note ==

	It was not explicit what the goals behind LL's proposed new authentication system are. The goals (Security, Flexibility, Persistence) and ~~Objectives~~ listed here are what SLDev believe them to be based on the original description and e-mail discussions.		It was not explicit what the goals behind LL's proposed new authentication system are. The goals (Security, Flexibility, Persistence) and beneifits listed here are what SLDev believe them to be based on the original description and e-mail discussions.

	== Summary ==		== Summary ==
Line 23:		Line 23:
	== Security ==		== Security ==

	=== LL~~'s Objectives~~ ===		=== Benefits Stated By LL ===
	* To mitigate the danger of password capturing Trojans masquerading as third party viewers		* To mitigate the danger of password capturing Trojans masquerading as third party viewers
	* Improve trust in third party viewers by providing a means of assurance to the user that the third party viewer could not be a Trojan capturing usernames and passwords.		* Improve trust in third party viewers by providing a means of assurance to the user that the third party viewer could not be a Trojan capturing usernames and passwords.
Line 83:		Line 83:
	== Flexibility ==		== Flexibility ==

	=== LL~~'s Objectives~~ ===		=== Benefits Stated By LL ===
	* Single Sign On - allowing multiple web applications (forums, support, account, jira, wiki etc.) and viewers to use the same username and password through a single point without duplicating usernames and passwords into multiple systems		* Single Sign On - allowing multiple web applications (forums, support, account, jira, wiki etc.) and viewers to use the same username and password through a single point without duplicating usernames and passwords into multiple systems
	* Extension of this to allow non-LL applications and web sites to participate in this single sign on system.		* Extension of this to allow non-LL applications and web sites to participate in this single sign on system.
Line 110:		Line 110:
	== Persistence ==		== Persistence ==

	=== LL~~'s Objectives~~ ===		=== Benefits Stated By LL ===
	* To synchronise the various LL's systems (forums, support, jira, account, etc.) so that by logging onto one, you are automatically logged onto the others.		* To synchronise the various LL's systems (forums, support, jira, account, etc.) so that by logging onto one, you are automatically logged onto the others.

← Older revision		Revision as of 16:39, 6 December 2007
Line 162:		Line 162:
	* [[User:Seg Baphomet\|Seg Baphomet]] 09:33, 8 October 2007 (PDT)		* [[User:Seg Baphomet\|Seg Baphomet]] 09:33, 8 October 2007 (PDT)
	* [[User:Ahzzmandius Werribee\|Ahzzmandius Werribee]] 10:06, 6 December 2007 (PST)		* [[User:Ahzzmandius Werribee\|Ahzzmandius Werribee]] 10:06, 6 December 2007 (PST)
			* [[User:Henri Beauchamp\|Henri Beauchamp]] 00:40, 7 December 2007 (CET)

← Older revision		Revision as of 11:06, 6 December 2007
Line 161:		Line 161:
	* [[User:Melanie Milland\|Melanie Milland]] 16:23, 2 October 2007 (PDT)		* [[User:Melanie Milland\|Melanie Milland]] 16:23, 2 October 2007 (PDT)
	* [[User:Seg Baphomet\|Seg Baphomet]] 09:33, 8 October 2007 (PDT)		* [[User:Seg Baphomet\|Seg Baphomet]] 09:33, 8 October 2007 (PDT)
			* [[User:Ahzzmandius Werribee\|Ahzzmandius Werribee]] 10:06, 6 December 2007 (PST)

← Older revision		Revision as of 09:33, 8 October 2007
Line 160:		Line 160:
	* [[User:Odysseus Fairymeadow\|Odysseus Fairymeadow]] 13:58, 1 October 2007 (PDT)		* [[User:Odysseus Fairymeadow\|Odysseus Fairymeadow]] 13:58, 1 October 2007 (PDT)
	* [[User:Melanie Milland\|Melanie Milland]] 16:23, 2 October 2007 (PDT)		* [[User:Melanie Milland\|Melanie Milland]] 16:23, 2 October 2007 (PDT)
			* [[User:Seg Baphomet\|Seg Baphomet]] 09:33, 8 October 2007 (PDT)