|
|
[Possibly OT]: Telegram Encryption? (Community)
[Possibly OT]: Telegram Encryption? // Community
Jun 7, 2001, 1:56pm
I've heard that whispers and regular chat messages were encrypted before
being transmitted to others in AW, but are telegrams also encrypted
while in transit to AW's server? I know all telegrams are stored in an
AWCI owned server and then "sent" to the user whenever they come
on-line. But when someone sends a telegram, is it encrypted to both AW's
server and to the citizen in which it was sent to? I'm guessing (hoping)
that it is encrypted while being sent to AW's "t-gram" server, encrypted
when being sent to the citizen in which it was intended for, and then
the AW browser decrypts it so the citizen can read it. I'm too lazy to
go run a packetsniffer and find out. =) Can anyone shed any light on
this?
Builderz
Stuff-X - Bot & World Hosting Services
http://www.stuffx.com/aw/
PGP Key ID: 0xAC0E7073 (for non-commercial use)
Jun 7, 2001, 2:26pm
why's this so important? one shouldn't send any confidential info trough AW
anyway.
KAH
[View Quote]"builderz" <sawran at yahoo.com> wrote in message
news:3B1FA3AB.75881F13 at yahoo.com...
> I've heard that whispers and regular chat messages were encrypted before
> being transmitted to others in AW, but are telegrams also encrypted
> while in transit to AW's server? I know all telegrams are stored in an
> AWCI owned server and then "sent" to the user whenever they come
> on-line. But when someone sends a telegram, is it encrypted to both AW's
> server and to the citizen in which it was sent to? I'm guessing (hoping)
> that it is encrypted while being sent to AW's "t-gram" server, encrypted
> when being sent to the citizen in which it was intended for, and then
> the AW browser decrypts it so the citizen can read it. I'm too lazy to
> go run a packetsniffer and find out. =) Can anyone shed any light on
> this?
>
> Builderz
> Stuff-X - Bot & World Hosting Services
> http://www.stuffx.com/aw/
> PGP Key ID: 0xAC0E7073 (for non-commercial use)
|
Jun 7, 2001, 4:51pm
I can't see any point to encrypting either the chat or telegram. Sounds like a big waste of CPU cycles.
[View Quote]"builderz" <sawran at yahoo.com> wrote in message news:3B1FA3AB.75881F13 at yahoo.com...
> I've heard that whispers and regular chat messages were encrypted before
> being transmitted to others in AW, but are telegrams also encrypted
> while in transit to AW's server? I know all telegrams are stored in an
> AWCI owned server and then "sent" to the user whenever they come
> on-line. But when someone sends a telegram, is it encrypted to both AW's
> server and to the citizen in which it was sent to? I'm guessing (hoping)
> that it is encrypted while being sent to AW's "t-gram" server, encrypted
> when being sent to the citizen in which it was intended for, and then
> the AW browser decrypts it so the citizen can read it. I'm too lazy to
> go run a packetsniffer and find out. =) Can anyone shed any light on
> this?
>
> Builderz
> Stuff-X - Bot & World Hosting Services
> http://www.stuffx.com/aw/
> PGP Key ID: 0xAC0E7073 (for non-commercial use)
|
Jun 7, 2001, 6:01pm
I'm just curious about AW's security. Is there anything wrong with being
curious? I'm sure you've been curious numerous times while creating
bots, KAH. It seems that many companies and programmers either do too
little testing or seem to make too little effort in their program(s)
with regards to a security standpoint. I know people that send world
passwords, privilege passwords, etc. all the time via telegrams to other
citizens and was just wondering if messages being sent were encrypted in
some form instead of being sent in plain text.
Builderz
Stuff-X - Bot & World Hosting Services
http://www.stuffx.com/aw/
PGP Key ID: 0xAC0E7073 (for non-commercial use)
[View Quote]kah wrote:
>
> why's this so important? one shouldn't send any confidential info trough AW
> anyway.
>
> KAH
|
Jun 7, 2001, 6:11pm
I've received a response from Ima Genius (via telegram) and Emil
Djurberg (via e-mail) with an answer to my question. According to them,
all telegrams are encrypted when sent both to and from the world server.
They also told me some other interesting information ;). I thank them
both for their quick response and polite attitude.
Builderz
Stuff-X - Bot & World Hosting Services
http://www.stuffx.com/aw/
PGP Key ID: 0xAC0E7073 (for non-commercial use)
[View Quote]builderz wrote:
>
> I've heard that whispers and regular chat messages were encrypted before
> being transmitted to others in AW, but are telegrams also encrypted
> while in transit to AW's server? I know all telegrams are stored in an
> AWCI owned server and then "sent" to the user whenever they come
> on-line. But when someone sends a telegram, is it encrypted to both AW's
> server and to the citizen in which it was sent to? I'm guessing (hoping)
> that it is encrypted while being sent to AW's "t-gram" server, encrypted
> when being sent to the citizen in which it was intended for, and then
> the AW browser decrypts it so the citizen can read it. I'm too lazy to
> go run a packetsniffer and find out. =) Can anyone shed any light on
> this?
|
<snipped my sig>
Jun 7, 2001, 6:35pm
Whoops. Another posting mistake today (see the worldbuilders newsgroup
for my other mistake). I meant to say the "universe server" instead of
"world server."
[View Quote]
<snipped post and sig to save bandwidth>
Jun 7, 2001, 7:00pm
well, if Roland & Co. bothered to encrypt chat and whispers, they truly
bothered to encrypt telegrams as well... personally, I don't encrypt files
that I send over networks with my apps, but none of my apps send
confidential info (well, they're not intended to at least) anyway...
KAH
[View Quote]"builderz" <sawran at yahoo.com> wrote in message
news:3B1FDD14.F28F590B at yahoo.com...
> I'm just curious about AW's security. Is there anything wrong with being
> curious? I'm sure you've been curious numerous times while creating
> bots, KAH. It seems that many companies and programmers either do too
> little testing or seem to make too little effort in their program(s)
> with regards to a security standpoint. I know people that send world
> passwords, privilege passwords, etc. all the time via telegrams to other
> citizens and was just wondering if messages being sent were encrypted in
> some form instead of being sent in plain text.
>
> Builderz
> Stuff-X - Bot & World Hosting Services
> http://www.stuffx.com/aw/
> PGP Key ID: 0xAC0E7073 (for non-commercial use)
>
> kah wrote:
AW
|
Jun 7, 2001, 9:11pm
AW isn't intended to send confidential info either :)
-Agent1
[View Quote]"kah" <kah at kahbot.com> wrote in message news:3b1feb89$1 at server1.Activeworlds.com...
> well, if Roland & Co. bothered to encrypt chat and whispers, they truly
> bothered to encrypt telegrams as well... personally, I don't encrypt files
> that I send over networks with my apps, but none of my apps send
> confidential info (well, they're not intended to at least) anyway...
|
|