I hope security has been taken into account in scenarious where two
services share the same port number as some authentication protocols, such
as SSL and CSI v2 (in its 'session' support), operate at no finer
granularity than an individual port. If two such services were sharing a
port and such an authentication protocol was in use, it would be essential
for the authentication requirements of the services to be consistent with
each other. For example, if one service permitted certain clients to assert
their identity, then the other service would have to do the same. Just a
thought...

Glyn

Reply via email to