[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Where should port rights go?
From: |
Niklas Höglund |
Subject: |
Re: Where should port rights go? |
Date: |
25 Nov 2000 21:05:10 +0100 |
User-agent: |
Gnus/5.0807 (Gnus v5.8.7) XEmacs/21.1 (Channel Islands) |
> > Many ways to implement port rights come to mind. Here are some ideas:
> <snip>
>
> 9. port-rights entirely managed by concerned parties:
>
> * every communicating party is uniquely identified by its
> sender-id/receiver-id. This information is provided by
> the kernel/libmom and is considered trusted.
>
> [...]
>
> - slight chance of forgeability by clients that poll every random-id
> from a server (guessing id's).
If you check (and trust) the sender ID of a message, how can an
untrusted client (whos sender ID doesn't match any trusted ones) to
find a way in? Is it possible (in L4) to forge the sender ID in a
message?
--
Niklas