security, cvs, was Re: interface bindings of x-server

[Keith Packard]

Around 10 o'clock on Nov 19, "roland@webde" wrote:

> the only chance to get rid of it, is to use unix domain socket (via
> -nolisten tcp)

That option should be the default; ssh refuses to listen on a unix 
domain socket, but appears quite happy to connect to a unix domain 
socket.

I don't know of any compelling reason to run X raw over TCP/IP these days; 
it's insecure, and a bandwidth pig.

-keith