Subj : Re: Is binkp/d's security model kaputt?
To   : apam
From : Avon
Date : Wed Sep 22 2021 05:36 pm

On 22 Sep 2021 at 02:07p, apam pondered and said...
 
 ap> Plus, I don't really know the best way to do the transmission, I was
 ap> thinking just using POST with a node number and password and having the
 ap> server respond with json messages in the response.

I've been reading about another dev who is interested in using NNCP as a tool
for getting messages from A to B

He writes

[snip]

If you haven't heard of it, NNCP [1] is to UUCP approximately what ssh is to
rsh/telnet.  NNCP is asynchronous, delay-tolerant for fire-and-forget secure
reliable files, file requests, Internet mail (and now NEWS) and commands
transmission. All packets are integrity checked, end-to-end encrypted,
explicitly authenticated by known participants public keys. Onion encryption
is applied to relayed packets. Each node acts both as a client and server, can
use push and poll behaviour model.   NNCP can operate over a lot of
transports: Internet, USB sticks, tapes, CD-ROMs, ssh, Dropbox, etc.

So basically it's UUCP for the modern world.  I've used NNCP for everything
from automated git repo synchronization to hundreds-of-GB ZFS backup streams.

And I now intend to offer Usenet feeds to interested people that would like to
receive them over NNCP.  The setup is easier than with UUCP, the environment
is more secure, and the approach is so similar that it needs only a tiny bit
of glue to drop in to INN in place of UUCP.

[snip]

Not sure if this thinking or approach is of any use as to what you are
thinking of tinkering with but I can approach said gentleman and invite him
to fsxNet and/or pass on some contact details to you via email if you felt
there was any interest. I suspect he may be interested in what you both are
kicking around too. :)

--- Mystic BBS v1.12 A46 2020/08/26 (Linux/64)
 * Origin: Agency BBS | Dunedin, New Zealand | agency.bbs.nz (21:1/101)

.