On Fri, 12 Nov 2010 12:24:42 -0500 Dan Rosenberg <drosenberg@xxxxxxxxxxxxx> wrote: > > > > > Also, the whole idea needs to be under a config option, so only > > the paranoid idiots turn it on. > > If that's what's necessary to get it accepted, I'm willing to do that. > But when a solution does not negatively impact usability or performance > and improves security, even in a small way, why should it not be enabled > by default? Of course it's my responsibility to first propose a > solution that is acceptable from a usability/debugging standpoint, but > assuming that can be achieved, I don't really see what the problem is. > There's a difference between being a "paranoid idiot" and wanting to > protect users from unnecessary exposure. See earlier discussion about automatically running crypto tests on boot which caused Linus to flame. This is more intrusive, and is not something most developers would want; but it might make sense in production environment. -- To unsubscribe from this list: send the line "unsubscribe linux-sctp" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
