Re: allow plaintext password if localhost connection?

[Arnt Gulbrandsen]

Mark Crispin writes:

On Thu, 28 Nov 2002, Simon Josefsson wrote:

What guarantees that traffic from 127.17.23.42 did not go through non-local systems?

Isn't 127/24 defined as being the local interface?

RFC 3330 and various earlier RFCs say 127/8.

There was a suggestion yesterday to test for IFF_LOOPBACK. I think that's the right approach.

--Arnt