[gnutls-devel] GnuTLS | server_name: synchronize server name send/receive (remove dns check) (!1838)

Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Sun May 19 13:27:38 CEST 2024




Andreas Metzler commented: https://gitlab.com/gnutls/gnutls/-/merge_requests/1838#note_1911680093


> I suspect most server programs using GnuTLS can likely deal with more or less arbitrary names. As such, rejecting nul characters is about the only reasonable test. [...]

Isn't "I suspect" a little bit weak here, i.e. shouldn't we rather continue to be restrictive when accepting network-fed content?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1838#note_1911680093
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20240519/500ae2f1/attachment.html>


More information about the Gnutls-devel mailing list