Next: Uniformity Up: A simple client/server Previous: File Transfer

Security concerns

It is possible that a user might be able to make an attack on NCF machines via IP means that would not be possible otherwise. Any attacks possible via dialup IP would also be possible for anyone on the Internet, so there is no incremental issue there.

One issue is that NCF users would find it easier to forge email and news. Several solutions are suggested:

  1. restrict access to the SMTP port, and require all email posts to go via IMAP protocol. (Not all email client software supports IMAP)
  2. require NNRP posts to be authenticated. (Chris Lewis has done some work on this at BNR, and the patches are to contributed to the net)
  3. make greater use of crytographic signaturesgif

Another consideration is that a user might set up some kind of server on their machine, and while they are online, might offer it to other users. This is a problem, not easily solved: if the terminal servers could provide some packet filtering gif, then it could be solved. Otherwise, the only way would be examining of logs.



Michael Richardson
Sun Apr 21 00:24:31 EDT 1996