<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<br>
<div>
<div>On Feb 5, 2013, at 10:57 AM, Andreas Ericsson wrote:</div>
<blockquote type="cite">
<div>
<blockquote type="cite">
<blockquote type="cite"><font class="Apple-style-span" color="#000000"><br>
</font></blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">Encryption is a must, ofcourse, as the packets will have to contain<br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">passwords some of the time. There's a libssh2 available which we should<br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">be able to use to set up preshared key authentication with security<br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">that even NSA will approve of.<br>
</blockquote>
</blockquote>
<blockquote type="cite">I like the idea of libssh2. SSH is simpler both in concept and<br>
</blockquote>
<blockquote type="cite">implementation than a PKI.<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<br>
We could also go with unencrypted at first and just make sure it works<br>
with stunnel or some such. It doesn't really matter, as organizations<br>
large enough to require large-scale distributed setups will have<br>
people who can handle encryption just fine.<br>
<br>
In either case, we should definitely have a cleartext option too, for<br>
debugging if nothing else.<br>
</div>
</blockquote>
</div>
<br>
<div>I'd agree encryption is a must, well, for me anyway :) But it's always handy to have a cleartext option available when things just aren't working right and you need to trace and find out why.</div>
<div><br>
</div>
<div>So it almost seems like you could have a remote worker installed on each host, and just have it check that one host…other than you'd have a ton of remote workers, what would be the downside of doing that? Removes the need for nrpe or other options for
remote checking…</div>
<div><br>
</div>
<div>Dan</div>
</body>
</html>