funsec mailing list archives

Server Name Indicator - feaure in 2014? (Or bug if its not present?)


From: Jeffrey Walton <noloader () gmail com>
Date: Thu, 13 Mar 2014 20:00:08 -0400

I was reading through http://hg.python.org/cpython/rev/846c0e1342d0/,
and wanted to get some feed back...

I'm using Debian 7.3 (fully patched). I struggled trying to get SNI to
work for a few hours and finally came across the patch above. It seems
that Debian provides Python 2,  and the Python folks did not backport
to Python 2 in 2010 because they considered it a feature.

Should lack of SNI support in 2014 be considered a security bug?
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: