Request for Comments: SSL between Login Server, World and Zone

[RangerDown]

If you're going to talk to the client, you're at the mercy of what the client does or does not support. To the best of my knowledge, the client does not support SSL either at the login or in world/zone communication.

[froglok23]

Agreed, anywhere client <-> server communication takes place, SSL is not possible at all.

- froglok

[WildcardX]

There is really no reason to implement SSL between world and zone. And generally speaking, implementing SSL on a game server is expensive in terms of performance. I just can't see a legitimate reason to do this.

[Theeper]

I'm not sure there is any reason to encrypt anything. If you can't encrypt all the traffic, why encrypt any ? I assume this is why the LS code isn't public. I may be wrong but I am guessing the LS uses an MD5 hash or something similar to validate users and push them to world. I should sniff that traffic and see, maybe it's plain text.