Bug#870813: wget: Please hash the hostname in ~/.wget-hsts files

2017-12-07 Thread Daniel Kahn Gillmor
On Sat 2017-08-05 09:59:32 -0400, Chris Lamb wrote: > I can't help but think of ~/.ssh/known_hosts which moved to hashing the > hostname for various security/privacy concerns. Shouldn't wget make the > parallel change? I think the changes to ~/.ssh/known_hosts are mainly security theater, and they

Bug#870813: wget: Please hash the hostname in ~/.wget-hsts files

2017-08-07 Thread Noël Köthe
Hello Chris, Am Samstag, den 05.08.2017, 08:59 -0400 schrieb Chris Lamb: > I can't help but think of ~/.ssh/known_hosts which moved to hashing > the hostname for various security/privacy concerns. Shouldn't wget > make the parallel change? Upstream Tim answered but the answer didn't reach you. Y

Bug#870813: wget: Please hash the hostname in ~/.wget-hsts files

2017-08-05 Thread Noël Köthe
tags 870813 + upstream forwarded 870813 https://savannah.gnu.org/bugs/?51666 thanks Hello Chris, Am Samstag, den 05.08.2017, 08:59 -0400 schrieb Chris Lamb: > I recently discovered the .wget-hsts file in my home directory which > is used to persist state for HSTS: > >   https://en.wikipedia.org

Bug#870813: wget: Please hash the hostname in ~/.wget-hsts files

2017-08-05 Thread Chris Lamb
Package: wget Version: 1.19.1-4 Severity: wishlist Hi, I recently discovered the .wget-hsts file in my home directory which is used to persist state for HSTS: https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security It contains lines such as: # HSTS 1.0 Known Hosts database for GNU Wge