Re: [platform-update-dev] Role Based Updates

[Bob Foster <bob@xxxxxxxxxx>]

Christophe Elek wrote:
> Ok, I started some code (kind of crappy now but... :)
> It seems we will have to leave to the LoginModule implementer the
> responsibility to authenticate on a server.
> On easy way , but not real 'user' oriented, is to use SSL with client
> authentication. We do not authenticate the user, but the 'machine' but that
> is easy to implement both on the eclipse side as well as for 'plugin'
> provider
> This then means one machine==one user
>
> Also, I was wondering, should we add code to 'import' trusted cert if we
> connect to an HTTPS site to retrieve the site.xml ?
> How many of us need that ?

I'll show a little ignorance here. I thought for https the cert was on 
the server side, not the client?

Bob