[6155] in Kerberos
Re: Why TELNET sends arbitrary environment variables at all?
daemon@ATHENA.MIT.EDU (djb@math.uic.edu)
Tue Nov 7 17:59:27 1995
Date: Tue, 7 Nov 1995 16:46:57 -0600
From: djb@math.uic.edu
To: basch@lehman.com, djb@silverton.berkeley.edu
Cc: kerberos@MIT.EDU
> How about within an enterprise? You might want to pass PRINTER, LPDEST
> and other environment variables relating to your local configuration.
Here's a better idea: Multiplex. You already have a connection; if you
want to print something, you should be able to send it along the same
connection.
Flexible. Easy to document. Works for everybody, not just enterprises
with some fancy distributed printer system.
> The point is you CAN'T predict what environment variables a user may
> wish to pass,
You shouldn't be surprised when creeping featurism destroys security.
---Dan
