Received: by 2002:a25:e74b:0:0:0:0:0 with SMTP id e72csp2101200ybh; Fri, 24 Jul 2020 04:33:22 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyz7HgsVaYCNoSIWaYT55IHjmSfZWm19+t0aw9fodJkvRPGGpkZesTrLABCJkYn4azR1TH9 X-Received: by 2002:a17:907:94c9:: with SMTP id dn9mr8477956ejc.355.1595590402059; Fri, 24 Jul 2020 04:33:22 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1595590402; cv=none; d=google.com; s=arc-20160816; b=eM5RJHAouFISPX2VMYuG5uWfJtcJjpuuUkYqreCa6yhI5+UPKK9DaX2S/aCk5pSMpB sOP8+HVg11xQLGG+08UHTpv0GYYzgKXLY3ufTX5j77I0iZMl6TBV4FgXFPpZviCsOCgL SXGus47ocQ2M3iAHS3HXKExSEvwi8bseiYYIU4v6BodMbNg2UYMKNrB0kuqBro42lxo2 bIwAzxrBVRf+2s8+RSDQkw+0/adveBzgU/Bc+7HybIYGKFp/vaDS6jD8QbbD0lpiX2um 5oY6mItY8jCLZCnJdcHaBJcbgeT5XwX0TrKPhdx/4fclbHZtje7qqF+XbxRYDlBk4FG6 XkdA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=SI/MgkPTh6mP/K2PJKOsBTsG57qp6BOD9nv+WKRRV2Q=; b=Cxr5o1qAHlzTIAPPBUyziolzFVymnna6PBNjts2PdCFp8JlkO5UCPXnUAlqsjSY6Xv aN6hLuv+fwAPM+aGf8/6dyLKtQgMQpTmw32HBfk6EFzHEb+yIiZZQWAzxW9TKnKltLwR kfcjjOpZkpnlqKnvMTgrjYGz1Wvn1iiN3kg7wX4SaQW6YGWffXDmnf3gjlrYDGTnQRuz 13IBYQdG8VK9EOi2qdQU7ckwXgHJGBz9J/F0280sEWD9SGuezmkE10mpOT1gFKtG24Wj BGxnz6aD7F8Ws/O9OligADbSv8JtVIZAZqb8wumF2fK5ANOHMT34KNa4fD/4bBcPTza1 NzQA== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id i26si359572ejk.576.2020.07.24.04.32.55; Fri, 24 Jul 2020 04:33:22 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726535AbgGXL3B (ORCPT + 99 others); Fri, 24 Jul 2020 07:29:01 -0400 Received: from correo.us.es ([193.147.175.20]:44600 "EHLO mail.us.es" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726366AbgGXL3A (ORCPT ); Fri, 24 Jul 2020 07:29:00 -0400 Received: from antivirus1-rhel7.int (unknown [192.168.2.11]) by mail.us.es (Postfix) with ESMTP id 777C318CDCF for ; Fri, 24 Jul 2020 13:28:59 +0200 (CEST) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id 5E0F8DA901 for ; Fri, 24 Jul 2020 13:28:59 +0200 (CEST) Received: by antivirus1-rhel7.int (Postfix, from userid 99) id 4E660DA87F; Fri, 24 Jul 2020 13:28:59 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on antivirus1-rhel7.int X-Spam-Level: X-Spam-Status: No, score=-108.2 required=7.5 tests=ALL_TRUSTED,BAYES_50, SMTPAUTH_US2,USER_IN_WHITELIST autolearn=disabled version=3.4.1 Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id D1F8EDA73F; Fri, 24 Jul 2020 13:28:56 +0200 (CEST) Received: from 192.168.1.97 (192.168.1.97) by antivirus1-rhel7.int (F-Secure/fsigk_smtp/550/antivirus1-rhel7.int); Fri, 24 Jul 2020 13:28:56 +0200 (CEST) X-Virus-Status: clean(F-Secure/fsigk_smtp/550/antivirus1-rhel7.int) Received: from us.es (unknown [90.77.255.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: 1984lsi) by entrada.int (Postfix) with ESMTPSA id 6A39242EFB83; Fri, 24 Jul 2020 13:28:56 +0200 (CEST) Date: Fri, 24 Jul 2020 13:28:56 +0200 X-SMTPAUTHUS: auth mail.us.es From: Pablo Neira Ayuso To: "Alexander A. Klimov" Cc: kadlec@netfilter.org, fw@strlen.de, davem@davemloft.net, kuba@kernel.org, netfilter-devel@vger.kernel.org, coreteam@netfilter.org, linux-kernel@vger.kernel.org, linux-decnet-user@lists.sourceforge.net, netdev@vger.kernel.org Subject: Re: [PATCH for v5.9] netfilter: Replace HTTP links with HTTPS ones Message-ID: <20200724112856.GA26061@salvia> References: <20200719115202.58449-1-grandmaster@al2klimov.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20200719115202.58449-1-grandmaster@al2klimov.de> User-Agent: Mutt/1.10.1 (2018-07-13) X-Virus-Scanned: ClamAV using ClamSMTP Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, Jul 19, 2020 at 01:52:02PM +0200, Alexander A. Klimov wrote: > Rationale: > Reduces attack surface on kernel devs opening the links for MITM > as HTTPS traffic is much harder to manipulate. LGTM. Can you squash this patch into this? netfilter: xtables: Replace HTTP links with HTTPS ones Probably better if this can be done for the entire netfilter tree in one single patch. Thanks.