ietf-nntp Draft 20 pre-release 2

[Ken Murchison]

Russ Allbery wrote:

> Rob Siemborski <rjs3 at andrew.cmu.edu> writes:
> 
> 
>>Is there any way for the client to refresh the security capabilities
>>without refreshing all of them?  Yes, anonymous clients may not care,
>>but I suspect client authors are more likely to get it wrong and not
>>refresh for the security case if the leave the document as it is now.
> 
> 
> 99.9% of NNTP connections are anonymous.  I don't think it makes a great
> deal of sense to penalize the extremely common case just because the
> unusual case might not do the right thing.

What's the penalty?  Just a single round-trip vs. maintaining two 
different code paths in the client.

I typically don't write client software, so I'm not an expert, but it 
seems like there would be a lot more places that a client could be 
optimized.

-- 
Kenneth Murchison     Oceana Matrix Ltd.
Software Engineer     21 Princeton Place
716-662-8973 x26      Orchard Park, NY 14127
--PGP Public Key--    http://www.oceana.com/~ken/ksm.pgp