On Thu, Feb 17, 2011 at 04:09:36PM -0600, DRC wrote: > On 2/17/11 3:38 PM, Martin Koegler wrote: > > This decision has been commited by Adam in rev 4093 and 4094. > > > > He has ripped out the support switching between Client and Server > > security type order and set the default to client. > > (http://www.mail-archive.com/tigervnc-devel@lists.sourceforge.net/msg00721.html) > > > > I'm in favour of this change, as as enforment of server settings is a > > placebo in the open source world. > > The open source world and the real world aren't often the same thing. > :) In the real world, SysAdmins like to be able to steer user behavior, > even if they can't fully control it. I will concede that without the > ability to set the security types at the system level, using a security > config file, enforcing the server security type order is less > meaningful. However, I'm trying to lay the groundwork for the later > addition of a security config file. As I've said before, I'm not trying > to make the system hack-proof. I'm trying to make it mistake-proof-- to > provide a mechanism whereby SysAdmins can steer users toward a > particular mode of operation.
Well, in the old RealVNC 4.1.3 vncviewer also honors server's preference list, as current trunk vncviewer. Personally I don't care if encoding preference comes from server or from client but for backward compatibility I would recommend that server specifies preference order. If client doesn't like particular types (for example TLS*/X509*) then it can disable them. Solution is also to add another vncviewer parameter; with this parameter client will use it's own encoding list as a preference order. Regards, Adam -- Adam Tkac, Red Hat, Inc. ------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb _______________________________________________ Tigervnc-devel mailing list Tigervnc-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tigervnc-devel
