[GoLUG] Localhost server without ssl?

[Kevin Chadwick]

-------- Original Message --------

> So here's my question. Assuming (and I know this is a big assumption)
> I'm not worried about somebody gaining physical possession of my DDD,
> is there any reason not to use plain text to access this server?

No, by default only root can listen to an interface promiscuously. Potentially a
rogue program could read your packets with something like tshark installed if
setup for user access to capturing packets but if it can do that then chances
are it can read your files anyway. Your mail headers will not show TLS on all
connections which might affect your mail score by e.g. gmail but they shouldn't
care except for contact with their servers.

p.s. Sorry admins. I sent this from kc-devuan again first, so just leave that to
drop or whatever is easiest.