Re: Singe DES encryption should be enabled

[Jon Nettleton <jon nettleton gmail com>]

On Thu, 2007-02-22 at 10:53 -0500, Dan Williams wrote:
> On Wed, 2007-02-21 at 21:34 +0100, Olaf Telsh�r wrote:
> > We should enable single DES encryption mode. In this
> > case, vpnc must be called using the --enable-1des
> > flag.
> 
> Are there really cases where 1des is still being used?  I'd rather that
> it be something you have to manually enable rather than accepting 1des
> by default.
> 

I think we really want to expose as many of the command line options in
the gui that we sanely can.  Make sure all our defaults are reasonable,
but allow people to tweak if necessary.

I think following the logic of your previous comments and changing the
vpn interface such that required goes back to being a normal panel.  We
add a small advanced options button on the bottom left of the dialog.
This will open a modal window organized by tabs for all the different
options that are supported.

I will try and mock up some screenshots when I have some free time.

Jon

> Dan
> 
> 
> > According to    
> > http://mail.gnome.org/archives/networkmanager-list/2006-September/msg00107.html
> >      this feature should be implemented using the
> > gconf to determing whether of not to use this flag.
> > I would like to implement this feature, but I'm not
> > sure where in the program to read out the gconf and to
> > transmit the data to the calling function.
> > My first idea was to write it in
> > gnome/applet/applet-dbus-vpn.c, where the gconf is
> > read already.
> > On the other hand, this would necessitate to extend   
> > the dbus message, which could lead to incompatibility
> > between the networkmanager and the vpnc-daemon,
> > couldn't it?
> > My second idea was to read it in
> > vpn-daemons/vpnc/src/nm-vpnc-service.c:nm_vpnc_start_vpnc_binary,
> >    but since the gconf isn't read in this file, it
> > would mean code duplication and that libgconf would be
> > linked to this binary and therefor growth of the bin
> > size.
> > I would like to know what the developers suggest.
> > 
> > 
> > 		
> > ___________________________________________________________ 
> > Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de
> > _______________________________________________
> > NetworkManager-list mailing list
> > NetworkManager-list gnome org
> > http://mail.gnome.org/mailman/listinfo/networkmanager-list
> 
> _______________________________________________
> NetworkManager-list mailing list
> NetworkManager-list gnome org
> http://mail.gnome.org/mailman/listinfo/networkmanager-list