Re: New CWE for DNS domain normalization/canonicalization with trailing dot

2022-01-24 Thread Kurt Seifried
users to find. > > > > Given how extensively DNS names are used, it seems reasonable for > including this entry as a variant. > > > > Thanks, > > Steve > > > > > > > > *From:* Kurt Seifried > *Sent:* Monday, January 24, 2022 11:50 AM >

RE: New CWE for DNS domain normalization/canonicalization with trailing dot

2022-01-24 Thread Steven M Christey
n with trailing dot New CWE for DNS domain normalization/canonicalization with trailing dot So we have: https://cwe.mitre.org/data/definitions/20.html https://cwe.mitre.org/data/definitions/180.html which are both, broadly speaking, catch-all buckets too broad to be of much help. I would like to pro

New CWE for DNS domain normalization/canonicalization with trailing dot

2022-01-24 Thread Kurt Seifried
New CWE for DNS domain normalization/canonicalization with trailing dot So we have: https://cwe.mitre.org/data/definitions/20.html https://cwe.mitre.org/data/definitions/180.html which are both, broadly speaking, catch-all buckets too broad to be of much help. I would like to propose a CWE for