On 9/2/10 6:37 AM, Adam Tkac wrote:
> I would rather disable "Plain" type by default because it is real
> security hazard. I've commited your patch without "Plain" in the
> default list. User can manually select it.
>
> Rest of the patch is OK, I've commited it as r4127. Thank you very
> much.

I haven't had time to review the patches yet, but it sounds like this is 
the functional equivalent of Unix Login Authentication?  That is, it 
passes a user/password in plain text to the server to be validated with 
PAM?  If so, then I concur that it should be disabled by default. 
However, if someone starts the server and passes this security type as 
the first in the list, will this cause the viewer to use the security 
type by default?  I would think it should.

------------------------------------------------------------------------------
This SF.net Dev2Dev email is sponsored by:

Show off your parallel programming skills.
Enter the Intel(R) Threading Challenge 2010.
http://p.sf.net/sfu/intel-thread-sfd
_______________________________________________
Tigervnc-devel mailing list
Tigervnc-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tigervnc-devel

Reply via email to