Re: [cobalt-users] SFTP

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Chris Mason wrote:

> Of course that implies that the other machines are not
> secure, which as we know is the truth, but do you want to make that public?

And perhaps worse, do you want to offer the "implied warranty" of
security for your secure machine?  That really could make you liable
if/when it's hacked.  If someone took your word that the security was
good, and someone stole a few thousand credit card numbers off the
system, even if he were responsible and not you, you'd still have an
awful lot of damage control.

That said, I'm talking with the NOC people at my colo room to see if we
can start offering colo behind a secure NATted firewall.  Of course many
of us wouldn't want to run a RaQ in a NATted environment, but I'm
experimenting with one now, and it appears to work fine.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205