From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 69F70138247 for ; Wed, 6 Nov 2013 20:38:02 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C000FE09FB; Wed, 6 Nov 2013 20:37:52 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id B3442E09F3 for ; Wed, 6 Nov 2013 20:37:51 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp.gentoo.org (Postfix) with ESMTP id B567F33F106 for ; Wed, 6 Nov 2013 20:37:50 +0000 (UTC) X-Virus-Scanned: by amavisd-new using ClamAV at gentoo.org X-Spam-Flag: NO X-Spam-Score: -1.235 X-Spam-Level: X-Spam-Status: No, score=-1.235 tagged_above=-999 required=5.5 tests=[AWL=-1.232, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from smtp.gentoo.org ([IPv6:::ffff:127.0.0.1]) by localhost (smtp.gentoo.org [IPv6:::ffff:127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CcXbm7vzxMOh for ; Wed, 6 Nov 2013 20:37:44 +0000 (UTC) Received: from plane.gmane.org (plane.gmane.org [80.91.229.3]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id C77F933F0C7 for ; Wed, 6 Nov 2013 20:37:43 +0000 (UTC) Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1Ve9r8-0002rT-8d for gentoo-dev@gentoo.org; Wed, 06 Nov 2013 21:37:38 +0100 Received: from ip68-231-22-224.ph.ph.cox.net ([68.231.22.224]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 06 Nov 2013 21:37:38 +0100 Received: from 1i5t5.duncan by ip68-231-22-224.ph.ph.cox.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 06 Nov 2013 21:37:38 +0100 X-Injected-Via-Gmane: http://gmane.org/ To: gentoo-dev@lists.gentoo.org From: Duncan <1i5t5.duncan@cox.net> Subject: [gentoo-dev] Re: friendly reminder wrt net virtual in init scripts Date: Wed, 6 Nov 2013 20:37:18 +0000 (UTC) Message-ID: References: <20131105033007.GA23263@linux1> <20131105144915.GM22282@server> <52791F2E.2020704@orlitzky.com> <527A9478.10208@whissi.de> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: ip68-231-22-224.ph.ph.cox.net User-Agent: Pan/0.140 (Chocolate Salty Balls; GIT 6e6fd84 /usr/src/portage/src/egit-src/pan2) X-Archives-Salt: 8cc0e609-2378-4f3d-8636-4f479090c136 X-Archives-Hash: cb9a8ca03ecdc94a1d24b8170c155fd9 Thomas D. posted on Wed, 06 Nov 2013 20:11:52 +0100 as excerpted: > Michael Orlitzky wrote: >> You should disable OCSP anyway. In Firefox, it's under, >> >> Edit -> Preferences -> Advanced -> Encryption -> Validation >> >> The OCSP protocol is itself is vulnerable to MITM attacks, which is >> cute when you consider its purpose. >> >> Moreover, it sends the address of every website you visit to a third >> party, which is the real reason to disable it IMO. > > This is going OT but I cannot leave this statement uncommented, because > from my knowledge this is wrong/you are hiding important information > everyone should know about: Thanks. I was going to reply with something like this, but your reply was far better than mine would have been. =:^) -- Duncan - List replies preferred. No HTML msgs. "Every nonfree program has a lord, a master -- and if you use the program, he is your master." Richard Stallman