[Webkit-unassigned] [Bug 155378] Webkit sends malformed SNI host names

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Mar 13 09:59:45 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=155378

--- Comment #4 from Yst Dawson <bugs.webkit.org.+ at y.st> ---
Additionally, this bug is actually present in many Web browsers. I've already reported it in Firefox <https://bugzilla.mozilla.org/show_bug.cgi?id=1255854> and Chromium <https://bugs.chromium.org/p/chromium/issues/detail?id=593952>, though it turns out that the Chromium developers knew about the problem before I reported it <https://bugs.chromium.org/p/chromium/issues/detail?id=496472>. I'm unable to test in Safari, but it wouldn't surprise me if the bug was present in Safari as well.

The Qt developers acknowledged the bug in their networking library <https://bugreports.qt.io/browse/QTBUG-51821>, and they sup it up pretty nicely <https://codereview.qt-project.org/#/c/152150/>:

Do not send the trailing dot of a hostname as part of the SNI
The SNI extension must not include the trailing dot, even though this
is legitimate for the host header.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160313/b5c1ba1d/attachment.html>


More information about the webkit-unassigned mailing list