New ZeroConf Spec
dank at kegel.com
Thu Jul 27 11:51:41 BST 2006
On 7/27/06, Dick Davies <rasputnik at gmail.com> wrote:
> If you use DNS based AAA mechanisms, then mDNS is probably not a good
> idea. We all know this.
I think what you're saying is "hostnames are useless for security with mDNS",
and I agree.
Currently, many applications assume that hostnames actually mean something,
and use hostnames to identify resources. (For instance, ssh, cups,
and web browsers.) I think those two facts together mean that
anyone who uses ssh, cups, or web browsers probably shouldn't use mDNS.
So, when we switch on Avahi and enter the brave new world of
meaningless hostnames, how will we know which services to trust?
More information about the ubuntu-devel