On Mon, Sep 02, 2002 at 07:28:32PM +0200, Oskar Sandberg wrote:
> The fact remains that any link from outside freenet can already do this.
> If it is really a problem then we ought to get rid of the htl argument in
> the URL altogether, and make it configuration setting.

Another solution would be to have fproxy generate a random per-session 
key which must be specified whenever a "protected" argument (such as 
HTL) is used.

Ian.

-- 
Ian Clarke                                        [EMAIL PROTECTED]
Founder & Coordinator, The Freenet Project    http://freenetproject.org/
Chief Technology Officer, Uprizer Inc.           http://www.uprizer.com/
Personal Homepage                                       http://locut.us/

Attachment: msg03756/pgp00000.pgp
Description: PGP signature

Reply via email to