Re: [Qemu-devel] [PATCH] Make password based authentication the default for VNC

2016-06-07 Thread Gerd Hoffmann
Hi, > Agreed. The target of this patch is however not people who know that > they want security, but rather people who don't know it :-). Ie. > people who just run things with their default settings and stop as > soon as it seems to work, without conideration for security. I have my doubts this

Re: [Qemu-devel] [PATCH] Make password based authentication the default for VNC

2016-06-07 Thread Attila-Mihaly Balazs
On Tue, Jun 7, 2016 at 12:24 PM, Daniel P. Berrange wrote: > On Tue, Jun 07, 2016 at 12:13:06PM +0300, Attila-Mihaly Balazs wrote: >> To improve the security of the embedded VNC server make password >> based authentication the default when no authentication mechanism >> is specified. > > VNC passw

Re: [Qemu-devel] [PATCH] Make password based authentication the default for VNC

2016-06-07 Thread Daniel P. Berrange
On Tue, Jun 07, 2016 at 12:13:06PM +0300, Attila-Mihaly Balazs wrote: > To improve the security of the embedded VNC server make password > based authentication the default when no authentication mechanism > is specified. VNC password authentication offers no meaningful level of security, so this i