I like this, this seems like a good compromise. If you are using localhost, then you are using it for personal development, testing and use. If you listen outside of localhost, then you're up and running and secure by default seems much more important.
David On Nov 8, 2007 12:13 PM, Kathey Marsden <[EMAIL PROTECTED]> wrote: > I wonder if it would be acceptable to have no security manager for a > server that only accepts connections from localhost, but keep it enabled > if remote connections are enabled. > > Kathey > > > >
