Re: Emacs RPC security

[Lars Magne Ingebrigtsen]

Ted Zlatanov <address@hidden> writes:

> ssh+ssh-agent has a user name and can authenticate the host keys.

Emacs Server has a secret it authenticate, which is pretty much the same
thing. 

> It has many other feature server.el doesn't, so it's like only root
> SSH access was ever allowed.  Most importantly, it has PPK
> authentication so there is no shared secret passed around unless the
> server allows password authentication.

Well, if the Emacs Server connection was encrypted, it'd be rather
similar.  You need access to the agent to subvert ssh+ssh-agent, and you
need access to user-read-only files to access the Emacs Server.  Not
much difference (in principle), except for the transport layer security.

-- 
(domestic pets only, the antidote for overdose, milk.)
  bloggy blog http://lars.ingebrigtsen.no/