Re: Oaf default build...

[Miguel de Icaza <miguel helixcode com>]

> Is this solution implemented now? And if so, does that resolve the
> security concerns?

If this is implemented, it resolves part of the security concerns.

The other security concern is that in the past a connection was tagged
as hostile until the client authenticated itself.  ORBit would run in
prevent-hostility mode until the cookie was received.

This mode basically meant that data and messages were limited in the
size that ORBit would accept.  Like for instance, until a client is
authenticated, we did not allow buffers bigger than 128k to be
transfered.

Miguel.