Embed Notice

@niggy @alex this is correct (and what I would recommend to a client/org) but this is a hard sell for FOSS projects where you don’t control the OS or network layer. Best OSS projects can do is include a bunch of init runtime checks for the vulns and warn that external (to the software) config changes need to be made for security.

Then you get 9,999 GitHub tickets asking “how do I enable DNS rebind protection for <insert random tech stack here>