On Mar 2, 2020, at 1:05 PM, Mark J. Blair <nf6x at
nf6x.net> wrote:
On Mar 2, 2020, at 9:45 AM, Paul Koning
<paulkoning at comcast.net> wrote:
It's not there currently. SSL would be easy to do in PyDECnet given the SSL library
that exists in Python. SSH tunnel not quite so much. Would SSL be sufficient?
I would think that SSL would be fine for the link security. Would that also provide a
mechanism for the caller to authenticate themself to the upstream link?
The Python SSL library has a pile of support for certificates (in both directions, as far
as I can tell, so mutual authentication is possible). Also ways to query the certificates
used. This is stuff I haven't used before so it will take some study to understand
it.
paul