Re: D-Bus across networks?

Felipe Gasper <felipe-c4PQK5fb7feI/[email protected]>
Newsgroups gmane.comp.freedesktop.dbus
Message-ID <[email protected]>

> On Nov 15, 2018, at 8:08 PM, Lawrence D'Oliveiro <[email protected]> wrote:
> 
> On Thu, 15 Nov 2018 19:33:04 -0500, Felipe Gasper wrote:
> 
>> I know D-Bus *can* work over TCP to facilitate this kind of workflow,
>> but I’ve not read much about D-Bus’s actually being widely used in
>> that way.
> 
> Probably because it opens a whole new can of worms.
> 
> The use of D-Bus across networks was discussed on this list as recently
> as July
> <https://lists.freedesktop.org/archives/dbus/2018-July/017483.html>.
> And predictably there were those taking a naïve “she’ll be right”
> attitude.

Cool--thanks for this!

> The fundamental problem, as Bruce Schneier would put it, is that
> security does not compose: you can take two systems which have
> individually been demonstrated to be “secure”, try to connect them
> together, and end up introducing new security holes, which may not be
> obvious at all. So you have to ignore much of the testing done on
> the components, and test the entire combination pretty much from scratch
> to verify its security.

It would seem WAMP, at least, operates under the same set of concerns, so to deploy D-Bus in such a context would seem at least “no worse”. I would think deployment of any kind of network-wide, intra-node messaging solution would face similar concerns.

Anyhow, thanks.

-FG
_______________________________________________
dbus mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/dbus
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.