| Well in practice -Y is the new -X, all it is saying is basically that you trust the admin on the box you are connecting to, that the host itself is trusted. This is certainly nothing like the old issue of things like 'xhost +' and the like. Unless I am missing something, the new -Y is no less secure than the old -X that we have been using up to this point. |