[ZODB-Dev] ZODB 3.2 release plan posted

Jeremy Hylton jeremy@zope.com (Jeremy Hylton)
Wed, 6 Nov 2002 13:20:03 -0500


>>>>> "CR" == Christian Reis <kiko@async.com.br> writes:

  CR> On Tue, Nov 05, 2002 at 02:04:35PM -0500, Jeremy Hylton wrote:
  >> I have posted a tenative release plan for ZODB 3.2 in the ZODB
  >> Wiki at http://www.zope.org/Wikis/ZODB/ZODB%203.2%20Release
  >>
  >> There are a small set of proposed features centering around
  >> better configuration and management of ZEO and ZODB.

  CR> I'm happy to see SecureZEO listed, and me and Johan can put up
  CR> some good time to work on this for 3.2. Do we have a plan on
  CR> what needs to be done, or should we draw one up?

We don't have a specific one.  Feel free to update the Wiki with more
specifics. 

  CR> The main issues I can see are: offering plaintext versus a
  CR> CHAP-like implementation, and how to store the passwords on the
  CR> server-side.  Anybody see anything else that needs catering?

Other issues: There should be enough mechanism in place to have
pluggable authentication.  We should figure out whether we need to
bump the protocol version to handle authentication; I think we do.

I hope we could avoid using plaintext passwords at all.  SRP seems
like a good protocol to use.

Jeremy