inter-site communication

[hutchic]

I have a number of sites that use the same core features and set of modules. I'm looking for direction on how to have a "master site" that the other sites can check the mtime (version number) etc of the modules they use and securely download and update themselves.

Any resources on the means of communication/protocol methodology (challenge/response, three way handshake etc), and most importantly how to do it securely cross-platform and in PHP.

Suggestions/comments any help at all welcomed

[crazychris]

an http/https call to the master site can return a version, compare to local version, then instigate a download/update script. Then all you need to do is upload the files and change the version number.

[hutchic]

I've been looking into XML-RPC (specifically Keith Devens: http://keithdevens.com/software/xmlrpc) however without ssl I see no way to garantee the level of security I'm looking for.

Client server setup so I'm thinking un/password for the client to logon and check the ip and domain name. Finally encrypt all transmissions with rotating salt.

Anyone pick a flaw/vulnerability out of that logic?