3 ms·
In general, yes. Sometimes longer is reasonable, sometimes shorter is reasonable.
by sarciszewski 11y ago
In general, yes. Sometimes longer is reasonable, sometimes shorter is reasonable.
- sneak 11y agoThis is all speculation and not based on any real data. Full, immediate, public disclosure is also reasonable.
- fweespeech 11y agoThe problem with full, immediate disclosure is its pretty easy to build an exploit for a known CVE. Switching Nginx out in your infrastructure (for instance) isn't a simple trick at scale when you have a heavily customized install. (e.g. OpenResty with routing code)