[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Simple Security - Layered Filtering should be in the document



Hi,

On Fri, Jul 31, 2009 at 12:18:55PM +0300, Yaron Sheffer wrote:
> Your argument is valid today. But once any tunnel-based transition mechanism
> is standardized and widely adopted by commercial operating systems, there
> will be untunneling done by default, with no security mechanisms attached.

Given the history of operating systems (changing from "every service is
running by default and reachable from the whole world" to "only those
services that are needed are running, and everything is firewalled by
default") I find your assumption quite unlikely.

Gert Doering
        -- NetMaster
-- 
Total number of prefixes smaller than registry allocations:  128645

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279

Attachment: pgpVWDj19auSc.pgp
Description: PGP signature