Re: [whatwg/fetch] Checking host header to prevent DNS rebinding (#1043) from Anne van Kesteren on 2020-06-26 (public-webapps-github@w3.org from June 2020)

From: Anne van Kesteren <notifications@github.com>
Date: Fri, 26 Jun 2020 09:49:22 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/1043/650282300@github.com>

I don't remember if it was intentional, but DNS rebinding is a small subset of the problems you have when you're not using HTTPS so it doesn't really seem worth mentioning at this point in time. And in general standards already cover HTTPS advocacy pretty well.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1043#issuecomment-650282300

Received on Friday, 26 June 2020 16:49:35 UTC