Freenginx: Core Nginx developer announces fork

Re:Freenginx: Core Nginx developer announces fork by e12e on Thursday February 15, 2024 @09:18AM (#39382977)

> "Denial of service" is never a security bug.

What about serving certificate revocation list, with another system relying on say one day old cache? (Sure, that's "fail open" - but still...).

Or proxying LDAP for sync to a central auth/authz system?

Ed: proxy giving access to logging system goes down - alert on failed logins silenced, disabling rate limits for brute force attacks?

[ Parent | on HN ]

Re:Freenginx: Core Nginx developer announces fork by arp242 on Thursday February 15, 2024 @10:35AM (#39383932)

Almost any bug in those kind of systems are potential security bugs. Not having the service available at all is probably among the least critical type of bug that can happen.

[ Parent | on HN ]

Re:Freenginx: Core Nginx developer announces fork by GoblinSlayer on Friday February 16, 2024 @07:42AM (#39396177)

AFAIK, mandatory OCSP is turned off by default. Exactly because it fails regularly. Try to turn it on and see how it goes.

[ Parent | on HN ]

Re:Freenginx: Core Nginx developer announces fork by account42 on Monday February 19, 2024 @09:14AM (#39429939)

For how long does it fail? Because I have not seen any availability issues with OCSP stapling (including must staple in the cert) using Let's Encrypt.

[ Parent | on HN ]