> From: Gordon Rowell [mailto:[EMAIL PROTECTED]]

> If you start trusting what identd gives you, you're on a slippery 
> slope :-) I'm constantly amazed when sites require identd in the belief
> that it actually tells them anything...(actually, it can tell them
> _anything_ - Who would you like to be today?).

The real use for identd info is for multi-user sites with real
administrators.  If the administrator configures identd to
provide accurate (or obsfucated but reversible) information
then he will know who is responsible when he receives a
complaint that includes the ident info.   In these days of
proxied connections to PC's that the users control themselves
it is probably a lot less useful, but still worth making connections
wait for the timeout through misconfigured firewalls that block
the request without returning the 'denied' ICMP packet. 

  Les Mikesell
   [EMAIL PROTECTED]


--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org

Reply via email to