API about bastillion

[skavanagh]

There are a couple of challenges with implementing an API.

KeyBox generates a public/private key when it first starts up. And if that public key is not on the server that your are trying to distribute the user public keys to, then the user has to authenticate.

At that point it prompts you for a password or passphrase. So there would always have to be some interaction with the user to handle authentication failures.

I guess the API could provide some mechanism for that, but it couldn't be some automatic thing.

Also, I would worry about security b/c you wouldn't want the API open to just anyone.

It would have to be locked down in such a way that an unauthorized client couldn't create their own users, distribute their personal keys and gain access to the servers that were defined by a different client.

Thanks for the feedback!!!