New ZeroConf Spec

Dan Kegel dank at
Thu Jul 27 11:51:41 BST 2006

On 7/27/06, Dick Davies <rasputnik at> wrote:
> If you use DNS based AAA mechanisms, then mDNS is probably not a good
> idea. We all know this.

I think what you're saying is "hostnames are useless for security with mDNS",
and I agree.

Currently, many applications assume that hostnames actually mean something,
and use hostnames to identify resources.  (For instance, ssh, cups,
and web browsers.)  I think those two facts together mean that
anyone who uses ssh, cups, or web browsers probably shouldn't use mDNS.

So, when we switch on Avahi and enter the brave new world of
meaningless hostnames, how will we know which services to trust?

- Dan

More information about the ubuntu-devel mailing list