[Freeciv-Dev] Re: connect dialog ver 3 (PR#1911)

[Thomas Strub <ue80@xxxxxxxxxxxxxxxxxxx>]

On Wed, Oct 23, 2002 at 09:10:46PM +0200, Raimar Falke wrote:
> On Wed, Oct 23, 2002 at 02:51:07PM -0500, Jason Short wrote:
> > Mike Kaufman wrote:
> > 
> > >no, but the problem of the public servers is _not_ the problem. The real
> > >problem is running a server from a client on your own box. You simply do
> > >not want to give hack level access to anyone who did not actually have
> > >permission to start the server. Playing games about where certain
> > >connections can save savegames to is not a good solution. If I am the
> > >client starting a server, then I damn well want the ability to save games
> > >anywhere I please (within my own machines' permissions)...
> > 
> > The server should not be able to save a game.  Only the client should be 
> > able to.  This is fundamentally more secure than relying on 
> > authentication or file permissions to prevent security holes.  And it is 
> > far more elegant.
> > 
> > When the server tries to save a game, it generates the save data, then 
> > sends it to the client that requested the save.  The client can then 
> > save the file themselves.  Slow, but effective.
> 
> Too slow. And in a multipler game you also get a great opportunity to
> cheat.

gzipped savegame (200x100) 246890 Byte. 
Connection to the same game per player ~400000 Byte.

The cheating is the problem but you have it for every person who has
acces to the server. I'm wondering why nouja isn't winning more games
...

Thomas