New ZeroConf Spec

Dan Kegel dank at
Thu Jul 27 03:01:33 BST 2006

On 7/26/06, Travis Watkins <alleykat at> wrote:
> It's a tradeoff: security (doesn't appear to be much of an issue) vs
> functionality. Do we want the features avahi gives? That's really what
> it comes down to.

You're right that it's a tradeoff.
You're wrong that security isn't much of an issue.
Since reasonable people are evidently disagreeing on this point,
it would be best to let the end user decide whether to
activate Avahi at all.    The easiest and safest way to do that
is to not install Avahi by default, but to let users know that
installing it will make networking transparant and easy,
both for humans and for malware.
- Dan

More information about the ubuntu-devel mailing list