[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAHG8knDD7DXRF_-fhy6ePx=H6yPhZbzEOrX_dpAEp6XUOPONcQ@mail.gmail.com>
Date: Wed, 8 Oct 2014 20:03:37 -0700
From: ArkanoiD <ark@...ex.net>
To: oss-security@...ts.openwall.com
Subject: Re: Thoughts on Shellshock and beyond
I think there was one and simple way to prevent heartbleed, renegotiation
bugs etc altogether: STOP inventing and enabling by default useless "cool"
features. Leave TLS functionality alone, it is overengineered enough
already. If you think it would be "cool" to teach it a few new tricks, make
it disabled by default for users who never need it.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
