[pve-devel] pve-qemu-kvm : add spice socket support

[Alexandre DERUMIER]

>>I am quite sure we want to encrypt everything (or nothing). 
>>Mixing does not really makes sense for me. 
>>
>>Or do I miss something? 

I'm agree to use full tls. (Don't known if encrypting the display can use more cpu on the client or add latency, but we can choose the cipher, so it should be ok)

----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Mardi 25 Juin 2013 07:32:49 
Objet: RE: [pve-devel] pve-qemu-kvm : add spice socket support 

> Thanks. I'll work on tls socket next week. (need a little patch to libspice server) 

BTW, I will be out of office from 1.7 until 14.7 (I will be online sporadically). 

> About that, with spice we can have channels on tls and channels without tls. 
> 
> For example, you can have input keyboard on tls, and display on non-tls. 
> 
> I don't known if we want full tls, or mix both. (but that mean 2 sockets, and 2 
> socat tunnels) 
> 
> Don't known if the overhead of tls on display is big or not 

I am quite sure we want to encrypt everything (or nothing). 
Mixing does not really makes sense for me. 

Or do I miss something?