jk2mv icon indicating copy to clipboard operation
jk2mv copied to clipboard

Client id for stat tracking

Open aufau opened this issue 5 years ago • 1 comments

Provide unique client id to servers for simple tracking systems in serverside mods.

Either port ja_guid from OpenJK that provides rudimentary safety from impersonation attempts, but the id is different on each server (changes with server ip/port). This probably could be ported to a qvm mod so it's a bit superfluous.

Or use a public-key cryptography approach where client has a single public key as its id for all servers and authenticates using matching private key. This is better (single id allows cross-server tracking), safer and can't be ported to mod easily because cryptographic libraries depend on 64bit integer variables.

This requires designing authentication protocol and embedding it into existing connection protocols.

aufau avatar Nov 04 '18 17:11 aufau

Note: It seems ja_guid OpenJK implementation isn't safe after all. Secret key or equivalent can be probably extracted.

aufau avatar Aug 16 '19 19:08 aufau