Re: RPC over HTTP security

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2005-01-26 sf_mail_sbm () yahoo com wrote:
> We are thinking about deploying RPC over HTTP to access email from the
> Internet

Ask yourself two questions:

1. Why does nobody in his right mind do RPC over untrusted networks?
2. How does bloating a protocol by encapsulating it in plain-text make
   it any better?

Regards
Ansgar Wiechers
-- 
"Those who would give up liberty for a little temporary safety
deserve neither liberty nor safety, and will lose both."
--Benjamin Franklin