Re: [xwt-users]Security, connection to servers

On Sat, Jul 12, 2003 at 02:31:08AM -0700, Adam Megacz wrote:

> > This does in turn assume that 192.168.*.* et al are intranets,
> 
> This is always true.  192.168.*.* is explicitly not globally routable.
> 
> > and all others aren't.
> 
> Since there is no way to determine this, we must go with the safest
> assumption.

The safest assumption isn't in these cases ;) An xwar that is loaded
from the internet will be allowed to access the 'routable intranet', and
an xwar loaded from a 'routable intranet' will be allowed to access both
that intranet and the internet.

I understand your line of reasoning, but having a routable-but-blocked
intranet isn't against the rules, it's just wasteful. Since I don't
think you're out to intentionally punish those organisations, I think
it'd be best to acknowledge this situation so people can determine what
level of risk they're willing to take.

-- 
Emiliano