diff options
Diffstat (limited to 'fw/doc/design.md')
| -rw-r--r-- | fw/doc/design.md | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/fw/doc/design.md b/fw/doc/design.md index d6f3e55..1c78db1 100644 --- a/fw/doc/design.md +++ b/fw/doc/design.md @@ -4,7 +4,7 @@ two networks, or in front of one namespace.** Status: working and tested on the init-test VM, in all three modes. Not -yet fit to run on a machine you care about — see `todo.md`, item 1. +yet fit to run on a machine you care about — see `todo.md`. ## Why @@ -72,7 +72,10 @@ write, and the text comes back out of `dial(2)` — which is a far better diagnostic than a dropped packet. Because it proxies the *assembled* `/net` rather than synthesising a -tree, `cs` and `dns` come along for free. +tree, `cs` and `dns` come along for free. That is a convenience and a +hole in the same sentence: it is also why name resolution cannot be +refused in this mode, so a program with an empty rule set can still get +names looked up, which is exfiltration if you care about that. The real `/net` needs no second name and must not have one: any surviving path to it is a way around the filter. lib9p forks the server with |