H.Merijn Brand wrote:
On Thu, 18 Jan 2018 15:20:20 +0100, Petr Cerny <pcerny@suse.cz> wrote:
That said, please do not use X forwarding unless you really must even after ten people told you this sentence. Every time someone uses X forwarding, <insert your favourite kitten/baby cries/dies/starves combination or whatever>.
Doesn't sound convincing. What is the most current definitive guide for not using X11 forwarding? What should I tell a newby when he/she asks *WHY* it should not be used?
1) security - application can only grab inputs it gets from its X server. If you run it in a Xvnc, it only gets input that it is sent by the VNC client. 2) speed - the X protocol is usually much more verbose when compared to VNC, since it carries requests to draw things, while VNC only transports bitmaps (compressed). Try running Firefox via ssh -X and through VNC. I've also seen things that just didn't work via SSH-forwarded X11. 3) network outages - X forwarded apps will break on connection interrupt, VNC lives fully on the server and one can reconnect to it. Downside of VNC is, that you may be putting more strain on the server (the system that is running the application), but I would argue that if that becomes the problem, the question actually is, whether running that application remotely is the optimal solution (likely it isn't). Thanks Cheers Petr -- Petr Cerny Mozilla/OpenSSH maintainer for SUSE Linux -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org