F21 System Wide Change: Workstation: Disable firewall

[Michael Catanzaro]

On Thu, 2014-04-17 at 12:26 -0400, Paul Wouters wrote:
> For DNS issues we have similar issues. A sane default seems to be that
> if you plugin a cable or you enter wifi WPA(2) details, you are
> trusting the network you are connecting to per default. (with NM
> override options for corner cases like using WPA2 on your phone as
> hotspot but you don't trust the telco network)

Ah, that would make everything too easy. :(

For WPA Enterprise networks, of course. But a WPA PSK network is as
likely to be a trusted home network as it is a coffee shop that puts on
a password so that you have to be inside to see the password on a flier
or something, or a university network open to thousands of people.
Asking seems safest.

But another danger: if I am at home but my computer is not behind a
personal router with a NAT, do I select Home or Public? The average user
does not know and will pick Home. A prompt to select a network zone
needs to be carefully thought out to make it less likely that the user
picks wrong.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20140417/f6d7dc52/attachment.sig>