Received: by 2002:a25:ca44:0:0:0:0:0 with SMTP id a65csp1417058ybg; Wed, 29 Jul 2020 13:44:38 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwDgnMiARDErpCOh0aGnvc67268W4ctehqlTXGmLbFh1q2pFDDdfwXrS12/iIDZAGqivLXx X-Received: by 2002:a17:906:4451:: with SMTP id i17mr158017ejp.259.1596055478226; Wed, 29 Jul 2020 13:44:38 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1596055478; cv=none; d=google.com; s=arc-20160816; b=hfYpEmpCpt41k4wgaNfgKjNtzzv6RVUejjaZ7dm0gqK+kFc50WAM4nR1n18W/qyOd1 xgvCxlQ/M1+61D2wkYY744v5O2JheLbpLA/0oYKvcKlTvt2DUUDcCwA1ao2o2bLwBoHe Q00pLWxvUXcMn90K1e46DVM4TxHNWkTpa1DdPPlh+tKb80tRNvFpU+bRi35kQc+Nv4M1 WS547qRqcJgZiyv/sJ0YTg0UyDu9qCLQgH3P1jq6pIO/bunNxuCOe33p+xDesLZIidKo I+pgdrLbiWS2HeDYjTBvjPJX4dz4gLlmKnaXl1cB6a3x8027tVgEcGvf412+tjPFtaLu V6Gw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=UpLib3B64+mZ3xkv9d70jmVbqFHcxIW6mY2P6OJbXmU=; b=HyOeUGNG3Vv6CJSgIs+Hj4cjEEe+GkLGupFTrwuUB4xILkySpTtVLaMiFHVglBBKHv pLp+qD9uSg+b7J0T0h6DZCXlOy7WOrjSbdXxmjMQvZEYfU2vSBC61ZnlA0a8mwhkF/vb MjxkM3qfmfKllgIPE9ptjvHM6ttLY1a9CM2yQk8nT5vhSgjss/hSclWG9y0iqZQuzbia HDt/E+lytGXdC5/LmDBL0Z5ZkkkAZDu8znSHmHxd6NkGCUjDSgUk/pB+4xiAHDUBMypo VD65FbclOLwYOJI5qDVOBF4sp1n5dh+4XxLck/uIMPTjSGaWzl6XAgwfNel7UVIEOX/k 2KKw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id lg12si1865113ejb.661.2020.07.29.13.44.15; Wed, 29 Jul 2020 13:44:38 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726825AbgG2UoC (ORCPT + 99 others); Wed, 29 Jul 2020 16:44:02 -0400 Received: from correo.us.es ([193.147.175.20]:55770 "EHLO mail.us.es" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726631AbgG2UoB (ORCPT ); Wed, 29 Jul 2020 16:44:01 -0400 Received: from antivirus1-rhel7.int (unknown [192.168.2.11]) by mail.us.es (Postfix) with ESMTP id 000C4FB36E for ; Wed, 29 Jul 2020 22:44:00 +0200 (CEST) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id E0A8FDA84D for ; Wed, 29 Jul 2020 22:44:00 +0200 (CEST) Received: by antivirus1-rhel7.int (Postfix, from userid 99) id CA3E6DA793; Wed, 29 Jul 2020 22:44:00 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on antivirus1-rhel7.int X-Spam-Level: X-Spam-Status: No, score=-108.2 required=7.5 tests=ALL_TRUSTED,BAYES_50, SMTPAUTH_US2,USER_IN_WHITELIST autolearn=disabled version=3.4.1 Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id AFB7DDA78A; Wed, 29 Jul 2020 22:43:58 +0200 (CEST) Received: from 192.168.1.97 (192.168.1.97) by antivirus1-rhel7.int (F-Secure/fsigk_smtp/550/antivirus1-rhel7.int); Wed, 29 Jul 2020 22:43:58 +0200 (CEST) X-Virus-Status: clean(F-Secure/fsigk_smtp/550/antivirus1-rhel7.int) Received: from us.es (unknown [90.77.255.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: 1984lsi) by entrada.int (Postfix) with ESMTPSA id 742A34265A2F; Wed, 29 Jul 2020 22:43:58 +0200 (CEST) Date: Wed, 29 Jul 2020 22:43:58 +0200 X-SMTPAUTHUS: auth mail.us.es From: Pablo Neira Ayuso To: "Alexander A. Klimov" Cc: kadlec@netfilter.org, fw@strlen.de, davem@davemloft.net, kuba@kernel.org, paul@paul-moore.com, netfilter-devel@vger.kernel.org, coreteam@netfilter.org, linux-kernel@vger.kernel.org, linux-decnet-user@lists.sourceforge.net, netdev@vger.kernel.org, linux-security-module@vger.kernel.org Subject: Re: [PATCH v2] netfilter: Replace HTTP links with HTTPS ones Message-ID: <20200729204358.GA11388@salvia> References: <20200724112856.GA26061@salvia> <20200725170225.4505-1-grandmaster@al2klimov.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20200725170225.4505-1-grandmaster@al2klimov.de> User-Agent: Mutt/1.10.1 (2018-07-13) X-Virus-Scanned: ClamAV using ClamSMTP Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, Jul 25, 2020 at 07:02:25PM +0200, Alexander A. Klimov wrote: > Rationale: > Reduces attack surface on kernel devs opening the links for MITM > as HTTPS traffic is much harder to manipulate. Applied.