Re: [whatwg/fetch] Should we block port 10080? (#1191)

Belated data about usage of port 10080 from Chrome's stable channel:

| Port    | Percent |
| ------- | ------- |
| 69      | 0.00%   |
| 137     | 0.00%   |
| 161     | 0.00%   |
| 554     | 0.32%   |
| 1719    | 0.77%   |
| 1720    | 0.69%   |
| 1723    | 0.87%   |
| 6566    | 0.22%   |
| 10080   | 97.12%  |

The percentages are relative to all ports affected by Slipstream vulnerabilities, so they only represent about a millionth of all requests overall.

There's some bias in the data from the fact we're already blocking all these ports except for 10080.

Incidentally, the block of port 10080 is shipping to stable this week in Chrome version 91.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1191#issuecomment-849926838

Received on Thursday, 27 May 2021 20:41:02 UTC