Hello,

On Jun 28 12:08 Henrique de Moraes Holschuh wrote (shortened):
> On Wed, 28 Jun 2006, Johannes Meixner wrote:
> > (e.g. check for allowed source IPs, do additional optional
> > user authentication, check if data is valid, ...)
> 
> Since when checking if data is valid is *optional*?

There is a misunderstanding: You missed the ',' which seperates
the "optional user authentication" from the (mandatory) "check
if data is valid".

I mentioned the "check if data is valid" because for network
accessible services there must be more such checks.
For example to avoid denial of service problems by receiving
too much or too often valid data or by receiving only half of
a valid data stream and the server may wait infinitely for
the rest.
Such cases could happen without any bad intention (i.e. in
a trusted network where the source IP and the source user
are accepted) e.g. when too many remote systems access at the
same time or when a remote system crashes.
Of course such sophisticated checks would be nice to have
even on localhost but here it is much less critical when the
users on a particular system are overloading their "own" system.

Kind Regards
Johannes Meixner
-- 
SUSE LINUX Products GmbH, Maxfeldstrasse 5      Mail: [EMAIL PROTECTED]
90409 Nuernberg, Germany                    WWW: http://www.suse.de/

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
HPLIP-Devel mailing list
HPLIP-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/hplip-devel

Reply via email to