JBVB@AI.AI.MIT.EDU ("James B. VanBokkelen") (11/01/87)
We emphasize the security issues involved in "equivalent" hosts in our manuals (it appears at least 3 different places). We advise anyone with security concerns just to "say no" to rsh and rcp, and use ftp or an rexec client we provide instead. However, there are still a lot of people distributing and using Unices derived from 4.2 which require that any host requesting printer services be "equivalent", and our package includes an lpr client... 4.3 fixes this. Are the guilty parties listening? James B. VanBokkelen FTP Software Inc.