rra at stanford.edu
Sun Mar 4 02:05:07 UTC 2001
Sven Paulus <sven at tin.org> writes:
> When "designing" a new ctlinntd, please have a look what ISC did for
> bind 9: The ndc got changed to a rndc with remote control capabilities
> over UDP and authentication. I think, this would be a very useful
> feature for INN, too.
Hurm. There are serious security worries there. We need to be careful
not to implement a new privileged network protocol with authentication
support poorly, which is a very common mistake.
I'd much rather tell people to use ssh or the like.
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the inn-workers