[6207] in Kerberos
Re: Why TELNET sends arbitrary environment variables at all?
daemon@ATHENA.MIT.EDU (Bernd Felsche)
Sat Nov 11 04:45:19 1995
To: kerberos@MIT.EDU
Date: Sat, 11 Nov 1995 04:27:16 GMT
From: bernie@metapro.DIALix.oz.au (Bernd Felsche)
In <47ohpv$9bu@zuul.nmti.com> peter@nmti.com (Peter da Silva) writes:
>In article <47nsh1$o7h@sungy.germany.sun.com>,
>Casper H.S. Dik - Network Security Engineer <Casper.Dik@Holland.Sun.COM> wrote:
>> peter@nmti.com (Peter da Silva) writes:
>> >My question is, why did they set up Telnet so it passed arbitrary environment
>> >variables at all? About the only ones I can think of worth passing are "TERM"
>> >and "DISPLAY".
>> That's precisely where the problem starts. You think only of TERM/DISPLAY.
>> But what about:
>> TZ
> What does *my* TZ have to do with that of a system I'm telnetting
> to, anywhere in the world?
Well, do you want the remote system to report date-time in a sensible way
wrt you wall clock? Sometimes not. Usually, yes.
I think that a site should be able to determine the level of paranoia
of the telnetd in an easily-configurable way.
--
Bernd Felsche, MetaPro Systems Pty Ltd
130 Fauntleroy Avenue, Redcliffe, Western Australia 6104
Phone: +61 9 479 3722 Fax: +61 9 479 3720
