ALPACA writeup

2021-08-03 Thread Wietse Venema
Here's a nice writeup that illustrates why Postfix blocks ALPACA attacks. https://nakedsecurity.sophos.com/2021/06/11/alpaca-the-wacky-tls-security-vulnerability-with-a-funky-name/ Wietse

Re: ALPACA writeup

2021-08-03 Thread John Levine
It appears that Wietse Venema said: >Here's a nice writeup that illustrates why Postfix blocks ALPACA attacks. > >https://nakedsecurity.sophos.com/2021/06/11/alpaca-the-wacky-tls-security-vulnerability-with-a-funky-name/ Just wondering, did you add the anti-http stuff because of ALPACA or was it

Re: ALPACA writeup

2021-08-03 Thread Viktor Dukhovni
On Tue, Aug 03, 2021 at 01:23:32PM -0400, John Levine wrote: > >https://nakedsecurity.sophos.com/2021/06/11/alpaca-the-wacky-tls-security-vulnerability-with-a-funky-name/ > > Just wondering, did you add the anti-http stuff because of ALPACA or was it > already there? Postfix is written

Re: ALPACA writeup

2021-08-03 Thread Wietse Venema
John Levine: > It appears that Wietse Venema said: > >Here's a nice writeup that illustrates why Postfix blocks ALPACA attacks. > > > >https://nakedsecurity.sophos.com/2021/06/11/alpaca-the-wacky-tls-security-vulnerability-with-a-funky-name/ > > Just wondering, did you add the anti-http stuff

Re: ALPACA writeup

2021-08-03 Thread Claus Assmann
On Tue, Aug 03, 2021, John Levine wrote: > Just wondering, did you add the anti-http stuff because of ALPACA or was it > already there? As a simple look at the source code of older releases shows it was already there.

Re: ALPACA writeup

2021-08-03 Thread Noel Jones
On 8/3/2021 12:23 PM, John Levine wrote: It appears that Wietse Venema said: Here's a nice writeup that illustrates why Postfix blocks ALPACA attacks. https://nakedsecurity.sophos.com/2021/06/11/alpaca-the-wacky-tls-security-vulnerability-with-a-funky-name/ Just wondering, did you add the

Re: ALPACA writeup

2021-08-03 Thread Viktor Dukhovni
On Tue, Aug 03, 2021 at 02:11:12PM -0400, Wietse Venema wrote: > John Levine: > > It appears that Wietse Venema said: > > >Here's a nice writeup that illustrates why Postfix blocks ALPACA attacks. > > > > >