Sorry, forgot to send to list. Begin forwarded message:
Date: Sat, 20 Apr 2013 19:07:16 +0200 From: Michael Rasmussen <m...@datanom.net> To: Dietmar Maurer <diet...@proxmox.com> Subject: Re: [pve-devel] new vnc 1.2 works fine now with http://fqdn.... On Sat, 20 Apr 2013 16:53:43 +0000 Dietmar Maurer <diet...@proxmox.com> wrote: > > > Besides, I still do not understand how that improves security. > > > > > It does not. Java applets are, security wise, defective by design! > > I do not really understand that. It is exactly the same if > you download and install a program? So why is java defective by design? > Read this: http://www.cert.org/blogs/certcc/2008/06/signed_java_security_worse_tha.html Especially: "[..]This means that if you run a signed Java applet from one particular vendor, you will trust all Java applets from that vendor by default, regardless of the site that is hosting them" -- Hilsen/Regards Michael Rasmussen Get my public GnuPG keys: michael <at> rasmussen <dot> cc http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E mir <at> datanom <dot> net http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C mir <at> miras <dot> org http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917 -------------------------------------------------------------- The last thing one knows in constructing a work is what to put first. -- Blaise Pascal -- Hilsen/Regards Michael Rasmussen Get my public GnuPG keys: michael <at> rasmussen <dot> cc http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E mir <at> datanom <dot> net http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C mir <at> miras <dot> org http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917 -------------------------------------------------------------- I'm not afraid of death -- I just don't want to be there when it happens. -- Woody Allen
signature.asc
Description: PGP signature
_______________________________________________ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
