[Psi-devel] version of server in service discovery

[Paul Johnson]

Nicolas Vérité wrote:

> On 2/14/07, Maciek Niedzielski
> <machekku at uaznia.net> wrote:
>> slava karpuhin wrote:
>> > few my friends think what Psi - bad client because it doesn't display
>> > version of server in service discovery. i think what they are stupod
>> > =), but i know what some other clients does this.
>>
>> Honestly I've always wanted to have this, thanks for reminding me.
>> But I'm away till the end of this week, so no coding...
>>
>> Hmm.. and we're in feature freeze anyway.
>> I think I really have to start writing down ideas for 0.12.
> 
> Even if I find that feature funny too, it is well known that
> knowing the release/version of the software/OS is a security breach,
> be it on a dekstop/laptop or server...

That's probably bad advice to give.  Security through obscurity is not
security at all.  If your security model depends on people not being able
to figure out what software you're running, your security model is
fundamentally and inherently flawed and probably shouldn't be connected to
any network.