4 ms·

I still don't see how it is more secure. If the WM can use IPC and tell wayland 'hey, I want to send this keystroke' or 'what were the keyboard inputs?' then w

I still don't see how it is more secure. If the WM can use IPC and tell wayland 'hey, I want to send this keystroke' or 'what were the keyboard inputs?' then why can't some malicious application do the same? Can I run multiple wayland servers separate from each other? If not, then I still don't see how wm can prevent a random application from pretending to be a wm but actually being a keylogger.

Fnoord 8y ago
The Wayland compositor does that kind of task, not the DE/WM like with X. That's why porting to Wayland isn't trivial. The server has many less lines of code leading to a lower attack surface, and lower latency or less tearing, and better HiDPI functionality.