Re: Bootstrapping

[Mark . Burgess]

> I don't really trust cfengine's trust models anyway and probably wouldn't
> use them even if I had a cfservd outside my firewall. I'd use
> router ACLs upstream of the cfservd host and iptables on the box itself
> to only permit known-good IPs.

NOw this is asking for a flame. Why do people say things
like this? What trust model would you trust?
If you don't trust the cfengine trust model then
you do not trust the secure shell trust model either, because
it is the same only less strict. The cfengine trust model is really
quite strict compared to many. Is this just a thoughtless
comment or do you have an actual criticism to make of it?

Mark

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~