4 ms·
There's a thread with Felker on the postfix-users mailing list whingeing that water is wet and Wietse or Viktor threatening to do conditional compilation if MUS
by m3047 5y ago
There's a thread with Felker on the postfix-users mailing list whingeing that water is wet and Wietse or Viktor threatening to do conditional compilation if MUSL is present from April 2020, that sounds sort of like this:
Wietse:
> Congratulations! You just gave a new definition of security theatre:
> using an unauthenticated channel to distribute trust anchors.
Felker:
It's not security theater because nobody's claiming it's secure.
Rather it's a fairly weak form of hardening that increases the
required capabilities an attacker needs to exploit a known-insecure
system.
It's brain rot caused by too much systemd!
- m3047 5y agoIt occurs to me that someone may want to read the background material. https://marc.info/?l=musl&m=158680293802966&w=2 https://marc.info/?l=musl&m=158680293802966&w=2 I can haz DNS! https://marc.info/?l=postfix-users&m=158698506811448&w=2 https://marc.info/?l=postfix-users&m=158698506811448&w=2 "toy" stub resolver https://marc.info/?l=postfix-users&m=158986711614688&w=2 https://marc.info/?l=postfix-users&m=158986711614688&w=2 I'm really disappointed that you're detecting MUSL... https://marc.info/?l=postfix-users&m=158716200010400&w=2 https://marc.info/?l=postfix-users&m=158716200010400&w=2 Harmful to limit the use of (broken) DANE lookups
- m3047 5y agoThanks for the downvotes. This guy literally advocates that we don't follow "secure", so fuck everything over.
- m3047 5y agoWhat started the original thread was "postfix" "failing" security tests because it was installed in a Docker image running Alpine. Insecure! Why? OMG all these people, all this effort. Felker?