Stefan Caunter

If varnishd is now started with a -S secret-file argument, user connections are authenticated.

This solves the wide openness of the management access point to varnish. Usual workaround is to simply ssh to a shell on a restricted machine, but if you are running varnish on a system where there is shell access, any user can telnet to the management port and, well, manage varnish (by design).

This solution prevents that situation for hosting providers, and should allow wider deployments on multi-use non-dedicated servers.

http://varnish.projects.linpro.no/wiki/CLI

New: audio of David Ascher’s talk, “Open Messaging on the Open Internet ” at Open Web Vancouver June 2009. There is a cool bit about the guy who lost all his Facebook stuff because of their policy with respect to how they saw what his work was doing with his account. Evan Prodromou is audible at some point (discussion on federation).
They are mp3 conversions from audacity recordings made on my MBP, and unfortunately you can really hear me typing notes more than anything. It’s all there though. Content is Ascher’s, Creative Commons License as discussed.
Part 1 File size: 20725015 bytes
Part 2 File size: 8200871 bytes
Part 3 File size: 29154418 bytes