I have never used either.
Regards
-- Bhaskar
GT.M - Rock solid. Lightning fast. Secure. No compromises.
Kevin
--
http://groups.google.com/group/Hardhats
To unsubscribe, send email to Hardhats+u...@googlegroups.com
_____________
The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you.
_____________
--
Nancy Anthracite
I don't know what you are trying to set up a store front for, but let me work with the hypothesis that some of what you are trying to sell may include licenses to proprietary goodies that require WorldVistA to track sales and minimize the spread of unlicensed copies. Here's how that can work. The process can all be automated by scripting, and is secure (all WorldVistA servers except a public download site are behind firewalls).
- Anyone purchasing must have a public/private key pair (e.g., generated by GNU Privacy Guard) with the public key uploaded to the public key servers (e.g., pgp.mit.edu - from where it will be distributed to the network of PKI servers).
- As part of filling out the purchase order, the buyer enters the fingerprint of his public key on the PKI servers.
- The purchase site generates an e-mail or other notification sent to a WorldVistA address.
- On receipt of the e-mail, a listener at that WorldVistA address (manual or automated, depending on volumes), retrieves the public key from the PKI servers using the fingerprint, creates a version of the distribution file for the proprietary goodies encrypted with the public key of the buyer, pushes this up to a public FTP site and e-mails the URL / file name (a randomly generated file name) to the buyer. This file is of no use to anyone but the buyer.
- The buyer downloads the file and uses his/her private key to decrypt the file.
Regards
-- Bhaskar
GT.M - Rock solid. Lightning fast. Secure. No compromises.
-----Original Message-----
From: hard...@googlegroups.com on behalf of Nancy Anthracite
Sent: Tue 8/3/2010 8:09 PM
To: hard...@googlegroups.com
Cc: kdt...@gmail.com
Subject: Re: [Hardhats] Re: Web store front advice needed
I don't think we would have to do that as I think an email can be
automatically sent with a link in it to the download site.
On Tuesday, August 03, 2010, kdt...@gmail.com wrote:
> Bhaskar,
>
> Thanks for keeping this thread going.
>
> Right now I am trying to decide which machine to get to host all
> this. I want there to be a software repository, that the user is
> allowed to download from after purchasing the product. Sites like
> Paypal and Google and Yahoo all seem to work on a basis of them
> sending an invoice stating payment has occurred, and it would then be
> up to someone in WV to respond. I want it to be automatic.
>
> So I think that means we have to actually run the software store on
> our hardware after all. And that then makes it more complicated.
>
> Kevin
_____________
Creating a public+private key pair is trivial. You can do it with GNU
Privacy Guard from the command line. You can do it in a script (see the
gen_keypair.sh script in the GT.M database encryption plugin reference
implementation). There are also GUI front-ends that will do it for you,
e.g.:
- GnuPG shell (http://www.tech-faq.com/gnupg-shell.html)
- GPA (http://gnupg.org/related_software/gpa/index.en.html)
- wija (http://www.media-art-online.org/wija/)
Yes, this is more complicated than purchasing a tome from an online
store. But then, setting up and configuring VistA is slightly more
complicated than installing an office suite. The expectation is that
someone who is able to install and configure VistA will have no problem
learning the few steps needed to use public+private keys.
Regards
-- Bhaskar
GT.M - Rock solid. Lightning fast. Secure. No compromises.
On 08/04/2010 08:11 AM, kdt...@gmail.com wrote:
>
>
> Bhaskar,
>
> I like this. But I am thinking about how I would do this as a buyer.
> I am not sure that I know how to create a public key for myself. And
> if I don't know, than I am sure that many others don't as well. Do
> you think we could have a small application (for either linux or
> windows) that would generate this for them? I know that the PuTTY set
> has a way to generate keys. But then you have to store it to the hard
> drive and go find it etc. It just seems more complicated than, for
> example, buying from Amazon.
>
> Kevin
_____________