[Dxspider-support] Login and passwords REQUIRED to connect to CX2SA-8 DXSpider

[Mikel EA2CW]

Thanks Jose!

That measure will achieve that at least all the traffic between partner 
nodes (and although all we know it is made over an unencrypted protocol) 
will be a bit more secured.

I currently have all the partner nodes of my dxspider server connected 
in that way, whith no problem.

The second measure might be to force password identification in order to 
be able to send spots from each node. Unfortunately, pretty far by now 
to be implemented.

I have also a cc-cluster node, and due to the deficiencies of it, I have 
not both nodes connected (dx-spider <> cc-cluster)

I think we must have some things clear:

- We are sysops of a network who spreads spots, that is: our product are 
"spots".

- Our "clients" are the ham radio operators who use this "product" to 
make QSOs, whether in DXing or contesting.

- If the product we serve (thru the different softwares) is not valuable 
enough, due to errors or malicious behaviours allowed by the software we 
are using, our "clients" will search for another (more) reliable sources 
of data.

- If -as it has been already happened- during f.i. a major dxpedition 
(remember Bouvet) our network is flood by fake spots, our "product" will 
be not valid anymore, and the "clients" will not use it anymore. They 
problably will turn to other sources, as RBN, for example.

I am not saying that RBN cannot be the target of attacks, but the ways 
and consecuences of them would be more serious.

So, finally, any measure available that we can adopt or implement in 
order to make our "product" better, only can have good consequences, 
both for sysops and "clients".

If some of the cluster server or client softwares choose to don't adopt 
proper measures to reach an acceptable level of "product quality", the 
"market" will leave them back, sooner or later. So will happen to the 
nodes using them.

I previously saw the oposition to use passwords on our network. A 
network used from computers where we login everytime we want to use 
them, payed with the money we have in our banks (where we enter using 
passwords). What is the difference with cluster network? Do you really 
think that our "clients" are nor used to access services using passwords?

Anyway, we are not talking now about "clients" passwords, but only about 
authentication in the communications between nodes.

I beg your pardon for my english -and length too-

73, Mikel EA2CW | AE2CW

El 7/2/25 a las 13:12, CX2SA - Jose Ma Gonzalez via Dxspider-support 
escribió:
> Hello dear Partner:
> 
> I have several partners whose emails do not work or who didn’t answer.
> 
> In a few days CX2SA-8 DXSpider WILL NOT ACCEPT connections from partners 
> without Login and Password.
> 
> Please send me a PRIVATE EMAIL with the suggested password.
> 
> Those nodes that do not meet this requirement will be removed without 
> notice.
> 
> Thank you very much.
> 
> Best 73, Jose – CX2SA