Is it securely: `hostname`:10 ?

[Damien Miller]

On Thu, 2 Mar 2000, èÏÒÅ× óÅÒÇÅÊ îÉËÏÌÁÅ×ÉÞ wrote:

> Hello,
> I am using OpenSSH 1.2.1 on Solaris 2.6.
> I am using X forwarding intensively. During work OpenSSH creates
> display like `hostname`:10. Is it securely?? Why not 127.0.0.1:10 or 
> localhost:10 ?

Where "hostname" is the machine you logged in _to_.

If the target does not know its own hostname then things are very 
broken.

IIRC some broken Unices (references?) autodetect localhost:xx
$DISPLAYs and starting using shared memory to communicate.

-d

--
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work)