Seems to me, if the client is willing to do it you can't really call it
an "untrusted server." Foolishly trusted maybe...

I'm also confused that if I have to go through two firewalls to get to
it, how can it be considered to be in a DMZ? Unless you're client is
running two firewalls, to which I'd...

[ more ]