4 ms·
I believe this will fix a ~14 year old bug. Browsers have been punting on dns rebinding forever. Initially documented by Collin, here are two threads: Paper: h
by amenghra 5y ago
I believe this will fix a ~14 year old bug. Browsers have been punting on dns rebinding forever. Initially documented by Collin, here are two threads:
Paper: https://crypto.stanford.edu/dns/dns-rebinding.pdf https://crypto.stanford.edu/dns/dns-rebinding.pdf
Chrome: https://bugs.chromium.org/p/chromium/issues/detail?id=98357 https://bugs.chromium.org/p/chromium/issues/detail?id=98357
Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=689835#c3 https://bugzilla.mozilla.org/show_bug.cgi?id=689835#c3
- hoppla 5y agoExactly what I think as well. I have not looked into this attack for a while, but have always assumed it still is possible to proxy traffic via a user’s browser