From: Charles Comstock <cc1@...>
Date: 2004-02-15T11:45:00+09:00
Subject: Re: DRb / Rinda Examples

NAKAMURA, Hiroshi wrote:
> 
>>Why is it that the DRb and Rinda samples are not included by default in 
>>the ruby-1.8.1 codebase, and only in the downloadable version of drb?
> 
> I talked with the author.  Imported now.
> 

Thank you very much

>>As a related question, is there a good tutorial on how to use drb with 
>>ssl or not?
> 
> 
> Regards to drb with ssl, [ruby-talk:89917] explains step by step
> setup process.  WARN: it's NOT good, it's NOT tutorial.
> 
> The thread from [ruby-talk:89843] might help you to think
> about "is ssl needed?"
> 
> Regards,
> // NaHi
> 
> 

I didn't quite follow the argument about why ssl wouldn't be needed. 
The problem I see with this is that the protocol is effectively telling 
what to execute on the other end, and while I realize the instance_eval 
code has been removed, I'm pretty sure the protocol is pretty open.  I'm 
not setting anything up at the moment that I actually care that much, 
but I know if I actually wrote any sort of application that I would 
distribute, there is absolutely no way I would write it with just drb. 
I just don't trust the security of the protocol.  Not that it's written 
poorly or anything, just that the way it works so nicely is exactly why 
it appears less secure.

It's the same situation as using telnet as opposed to ssh.

Charles Comstock