Re: btw
Emiliano <[email protected]>
| Newsgroups | gmane.comp.java.xwt.general |
|---|---|
| Message-ID | <[email protected]> |
On Tue, Apr 01, 2003 at 02:33:15AM -0800, Adam Megacz wrote: > Emiliano Heyns <[email protected]> writes: > > Object ret = new XMLRPC("http://xmlrpc.xwt.org/RPC2/", > > "dns.resolve").call(new Object[] { host }); > > (rightfully) complains it cannot connect. Which is bad news for people > > behind a proxy, > > We have to do this for security reasons. Please see the reference. I know, but if the RPC server is down, nothing works for me. > > What about my earlier question? If we implicitly 'trust' the > > connection to the server the xwar was loaded from, things like this > > would still work even if the RPC server was offline. > > Still vulnerable; see www.xwt.org/sop.txt in the section on > "quick swap dns". I am probably missing something; in what sense is trusting the connection the xwar comes from different than trusting xmlrpc.xwt.org? Emile _______________________________________________ http://lists.xwt.org/listinfo/dev