bug-wget
[Top][All Lists]
Advanced
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bug-wget] Overly permissive hostname matching

From: Daniel Kahn Gillmor
Subject: Re: [Bug-wget] Overly permissive hostname matching
Date: Wed, 19 Mar 2014 11:38:55 -0400
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Icedove/24.2.0 
On 03/19/2014 11:26 AM, Jeffrey Walton wrote:

> wget "http://publicsuffix.org/list/effective_tld_names.dat"; -O $MOZILLA_LIST

I recommend using the following HTTPS URL instead, so that you have some
level of cryptographic verification of the data before loading it:

https://hg.mozilla.org/mozilla-central/raw-file/tip/netwerk/dns/effective_tld_names.dat

(this is what i use to update the debian publicsuffix package)

        --dkg

Attachment: signature.asc
Description: OpenPGP digital signature

reply via email to
[Prev in Thread] Current Thread [Next in Thread]