Re: [boost] Re: Yet Another Network Library

From: Peter Dimov (pdimov_at_[hidden])
Date: 2005-04-24 08:02:50

David Abrahams wrote:
> "Giovanni P. Deretta" <lordshoo_at_[hidden]> writes:
>
>> - It is extremely insecure.  In a network library security must be
>> paramount.  If the transport type were encoded in the address, it
>> would be much harder to validate externally received addresses.  A
>> similar argument can be made for the port numbers. It is better to
>> keep these things separated.  The library user can create its own
>> indexed factory collection if it really needs to.
>
> That's a very convincing argument.

No, it isn't. If you analyze the security of the two cases carefully you'll 
see that there isn't much of a difference, except that the 
"transport-encoded" type gives you one bit of extra information, the 
transport, which you can check against your expectations.