-
-
Notifications
You must be signed in to change notification settings - Fork 4.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
docs: add documentation for dns_pinning flag #41981
Conversation
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm totally fine with leaving this undocumented due to the potential impact 🙈
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Also agree with Joas
* DNS pinning is a security measure against DNS rebinding attacks. | ||
* | ||
* We recommend that you leave DNS pinning activated. | ||
* Only deactivate it if you understand what you are doing. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
* Only deactivate it if you understand what you are doing. | |
* Only deactivate it if your server can't resolve DNS and if you understand what you are doing. |
All right, then we leave it undocumented 🫣 |
Summary
Add documentation for dns_pinning flag
TODO
Checklist