6 ms·
Maybe domain fronting was initially disabled as an unsuccessful attempt to fix that bug, that's possible and as I said I was not involved in that decision. Stil
by FiloSottile 4y ago
Maybe domain fronting was initially disabled as an unsuccessful attempt to fix that bug, that's possible and as I said I was not involved in that decision. Still, if that's the case, there was a policy decision afterwards to leave it disabled, because disabling it did not fix the bug, as you seem to agree. (Again, not elaborating on the bug publicly without permission, but I remember it turned out to have nothing to do with the SNI.)
My point is that disabling domain fronting (or leaving it disabled after finding the bug's root cause) was a policy decision, not something necessary to mitigate the bug or prevent it from re-occurring.
- hungryforeggs 4y ago
- tptacek 4y agoJust for the record, there are very few people on the Internet I would trust more about this kind of stuff than Filippo.
- hungryforeggs 4y ago
- tptacek 4y agoI'm extraordinarily comfortable with how my comments here reflect on my judgement.
- eastdakota 4y ago
- dang 4y agoCommenters aren't allowed to attack others like this on HN, regardless of how wrong the other person is or it feels like they are. If you'd please review and follow the site guidelines, we'd appreciate it: https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html.