The value of peer in AuthenticationPermission
Mark Brouwer <[email protected]>
| Newsgroups | gmane.comp.java.sun.jini |
|---|---|
| Message-ID | <[email protected]> |
I'm wondering how important it is to specify the peer in the AuthenticationPermission you grant to a protection domain when making remote calls, or especially what kind of harm can arise from not specifying them (complete wildcarding of the peers). Assuming I have a 1000 or even more trusted servers I'm allowing to connect to, I'm afraid it doesn't scale very well to have that number of Authentication permissions granted to my protection domain just because of those 1000 different peers. These permissions are granted by the framework so it doesn't really bother me to specify the peers when it scales properly (which I doubt though), although if it isn't really necessary it is much easier to leave them out of the picture. But at all times I don't want to introduce a security hole due to ignorance. -- Mark -------------------------------------------------------------------------- Getting Started: http://www.jini.org/wiki/Category:Getting_Started Community Web Site: http://jini.org jini-users Archive: http://archives.java.sun.com/archives/jini-users.html Unsubscribing: email "signoff JINI-USERS" to [email protected]