[pve-devel] Fw: new vnc 1.2 works fine now with http://fqdn....

Michael Rasmussen mir at datanom.net
Sat Apr 20 19:17:06 CEST 2013


Sorry, forgot to send to list.

Begin forwarded message:

Date: Sat, 20 Apr 2013 19:07:16 +0200
From: Michael Rasmussen <mir at datanom.net>
To: Dietmar Maurer <dietmar at proxmox.com>
Subject: Re: [pve-devel] new vnc 1.2 works fine now with http://fqdn....


On Sat, 20 Apr 2013 16:53:43 +0000
Dietmar Maurer <dietmar at proxmox.com> wrote:

> > > Besides, I still do not understand how that improves security.
> > >
> > It does not. Java applets are, security wise, defective by design! 
> 
> I do not really understand that. It is exactly the same if
> you download and install a program? So why is java defective by design?
> 
Read this:
http://www.cert.org/blogs/certcc/2008/06/signed_java_security_worse_tha.html

Especially: "[..]This means that if you run a signed Java applet from
one particular vendor, you will trust all Java applets from that vendor
by default, regardless of the site that is hosting them"

-- 
Hilsen/Regards
Michael Rasmussen

Get my public GnuPG keys:
michael <at> rasmussen <dot> cc
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E
mir <at> datanom <dot> net
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C
mir <at> miras <dot> org
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917
--------------------------------------------------------------
The last thing one knows in constructing a work is what to put first.
		-- Blaise Pascal


-- 
Hilsen/Regards
Michael Rasmussen

Get my public GnuPG keys:
michael <at> rasmussen <dot> cc
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E
mir <at> datanom <dot> net
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C
mir <at> miras <dot> org
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917
--------------------------------------------------------------
I'm not afraid of death -- I just don't want to be there when it
happens. -- Woody Allen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://pve.proxmox.com/pipermail/pve-devel/attachments/20130420/0fe602cc/attachment-0001.pgp>


More information about the pve-devel mailing list