Re: New draft-draft of sftp...

[Bill Sommerfeld <sommerfeld%east.sun.com@localhost>]

> There are certainly undeniable reasons why client-side globbing
> causes problems. Unfortunately, I consider this to be an undeniable
> reason why server-side globbing can _also_ cause problems. Where
> does that leave us? On the one hand, we have potentially inaccurate
> results; on the other, we have a potential security hazard (although
> as far as I know I'm the only SCP implementor who considers it
> remotely important). 

(WG chair hat off)

yes, I agree that seems like something to worry about.

Trusting that the server won't feed you bogus pathnames as the result
of a glob request seems unwise.

					  - Bill