Re: Emacs RPC security

[Ted Zlatanov]

On Tue, 03 May 2011 03:16:21 +0200 Lars Magne Ingebrigtsen <address@hidden> 
wrote: 

LMI> Ted Zlatanov <address@hidden> writes:
>> As I keep trying to explain, you don't know who is on the other end
>> because there is *no* authentication, or rather it's binary: you have
>> the shared secret or you don't.

LMI> Yes, it's like ssh + ssh-agent.  (Only without the encryption, of
LMI> course.  :-)

ssh+ssh-agent has a user name and can authenticate the host keys.  It
has many other feature server.el doesn't, so it's like only root SSH
access was ever allowed.  Most importantly, it has PPK authentication so
there is no shared secret passed around unless the server allows
password authentication.

Ted