Status of Bugzilla #1153

[Simon Vallet]

On Tue, 21 Feb 2006 20:27:39 -0500
"Jefferson Ogata" <Jefferson.Ogata at noaa.gov> wrote:

> I see no performance degradation in X11 over ssh, and over low
> bandwidth connections I'll see performance improvements thanks to
> compression. On the other hand, I have written programs to capture
> keystrokes from monitored X11 connections, and I wouldn't run X over a
> cleartext connection under any circumstance.

We are well aware of the risk of using plain X11 -- but this was a
choice we made : trust me, on some of our machines, bloated Java GUIs
are simply not useable over SSH -- and yes, some of our users need
those.

> Someday we'll all be running DNSSEC and things will be different.

and also IPsec-enabled IPv6 ;-) I think those times are not coming very
soon, sadly.