On Thu, 13 Apr 2000, Mikael Olsson wrote:

> <soapbox height=above-normal>
> Proxies can't provide the same level of protection that they could
> ten years ago. Back then you _could_ actually ensure that common
> network services such as SMTP and NNTP followed protocol specs 
> and were indeed "secure". With the advent of the WWW and the plethora
> of new protocols and networked apps, this simply doesn't hold true
> anymore.

<soapbox height++>

Just because new protocols exist *doesn't* mean you have to let them
through the firewall.

> and all, but without the security flaws. So why not just secure the web
> server to begin with?

The server side is the *easy* part.  It's the client side where the legacy
of sloppyness will bite a *lot* of people.

> </soapbox>
> 
> Flames are welcome although it is very unlikely that I will respond to them.
> I think I've said my bit now.

0.

There's my bit ;)

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
[EMAIL PROTECTED]      which may have no basis whatsoever in fact."
                                                                     PSB#9280

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to