This is the mail archive of the
cygwin-xfree@cygwin.com
mailing list for the Cygwin XFree86 project.
Re: security, cvs, was Re: interface bindings of x-server
- From: Corinna Vinschen <corinna-cygwin at cygwin dot com>
- To: cygwin-xfree at cygwin dot com
- Date: Wed, 19 Nov 2003 10:52:08 +0100
- Subject: Re: security, cvs, was Re: interface bindings of x-server
- References: <054901c3ae7f$16b6bc60$2000000a@schlepptopp> <E1AMOk5-0001z9-00@evo.keithp.com>
- Reply-to: cygwin-xfree at cygwin dot com
- Reply-to: cygwin-xfree at cygwin dot com
On Wed, Nov 19, 2003 at 01:35:20AM -0800, Keith Packard wrote:
>
> Around 10 o'clock on Nov 19, "roland@webde" wrote:
>
> > the only chance to get rid of it, is to use unix domain socket (via
> > -nolisten tcp)
>
> That option should be the default; ssh refuses to listen on a unix
> domain socket, but appears quite happy to connect to a unix domain
> socket.
>
> I don't know of any compelling reason to run X raw over TCP/IP these days;
> it's insecure, and a bandwidth pig.
AF_LOCAL sockets are implemented using AF_INET sockets on Cygwin, using
a binding of 127.0.0.1 plus some overhead for security reasons. So
AF_LOCAL sockets are a few percent slower than AF_INET sockets.
Corinna
--
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Developer mailto:cygwin@cygwin.com
Red Hat, Inc.