Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: add documentation for dns_pinning flag #41981

Closed
wants to merge 1 commit into from

Conversation

kesselb
Copy link
Contributor

@kesselb kesselb commented Dec 2, 2023

Summary

Add documentation for dns_pinning flag

TODO

  • CI
  • Review
  • Merge

Checklist

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
@kesselb kesselb added enhancement 3. to review Waiting for reviews labels Dec 2, 2023
@kesselb kesselb added this to the Nextcloud 29 milestone Dec 2, 2023
Copy link
Member

@nickvergessen nickvergessen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm totally fine with leaving this undocumented due to the potential impact 🙈

Copy link
Collaborator

@Altahrim Altahrim left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also agree with Joas

* DNS pinning is a security measure against DNS rebinding attacks.
*
* We recommend that you leave DNS pinning activated.
* Only deactivate it if you understand what you are doing.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* Only deactivate it if you understand what you are doing.
* Only deactivate it if your server can't resolve DNS and if you understand what you are doing.

@kesselb
Copy link
Contributor Author

kesselb commented Dec 4, 2023

All right, then we leave it undocumented 🫣

@kesselb kesselb closed this Dec 4, 2023
@kesselb kesselb deleted the dns-pinning-config branch December 4, 2023 14:52
@skjnldsv skjnldsv removed this from the Nextcloud 29 milestone Feb 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3. to review Waiting for reviews enhancement
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants