> Heading in this direction of generic abstractions, it could also be nice to 
> enable s_client and s_server just use an arbitrary file descriptor.

Brilliant. +1

>This would enable, for example, a privileged process to open a restricted 
>port, drop privileges, and then exec s_server with the appropriate argument 
>for what file descriptor to use.

There's stunnel.  But this still a cool idea..  Probably need read/write fd's.

--  
Principal Security Engineer
Akamai Technologies, Cambridge, MA
IM: [email protected]; Twitter: RichSalz

Reply via email to