On 12/19/2009 04:51 AM, Jonas Eckerman wrote: > > (And if more security is needed the easiest way would be to simple > limit access to approved IP addresses.) Except that a token would enable one "owner" with multiple SA instances on separate networks to come across as one entity - that could be desirable too. It all depends on what you are trying to achieve of course. Also UDP means forgery is a bigger risk - so IP-based checks are less reliable.
-- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1