[RFC] New web server for bazaar

[Martin Pool]

On 19/09/05, James Blackwell <jblack at merconline.com> wrote:

> And now you've got a silent webserver that silently starts that never
> quite seems to die.*  **

Don't be too paranoid.

I think it's fine to make a smart or web server behave as it would in
Ubuntu: it doesn't run by default or until you make a decision to do
so.  If you run "bzr serve --port 8080" then it's pretty obvious
what's happening.

> * Yeah. Sounds far fetched, but this sort of thing happens in gnome and
> kde.  Want to run something that relies on a daemon, the system silently
> starts the daemon. 

The daemons in GNOME and KDE run listening on Unix domain sockets that
are only accessible by the current user.  Whether or not you like the
architecture, the security situation is entirely different to
listening on a routed tcp port.

-- 
Martin