> > Also, the whole idea needs to be under a config option, so only > the paranoid idiots turn it on. If that's what's necessary to get it accepted, I'm willing to do that. But when a solution does not negatively impact usability or performance and improves security, even in a small way, why should it not be enabled by default? Of course it's my responsibility to first propose a solution that is acceptable from a usability/debugging standpoint, but assuming that can be achieved, I don't really see what the problem is. There's a difference between being a "paranoid idiot" and wanting to protect users from unnecessary exposure. -Dan -- To unsubscribe from this list: send the line "unsubscribe linux-sctp" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html