<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="generator" content="Osso Notes">
<title></title></head>
<body>
<p>A simple way to secure Nailgun would be to replace the TCP sockets with Unix domain sockets, at least on Unixoid platforms.  (I gather they're not included in Java; but the first Google hit on "Java Unix domain sockets" will find an implementation.) A Unix domain socket is bound into the filesystem, and access is controlled via ordinary file permissions; if you set it 600, then only the user that started it will be able to connect.</p>
<p></p>
<p>Not a complete solution--if you want to keep working over the network, you'll still need some security for TCP--but it'd be a start.</p>
</body>
</html>