Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Avoid leaking hostname on failed hostname verification #26

Closed
wants to merge 1 commit into from

Conversation

doodlesbykumbi
Copy link

No description provided.

Copy link

@BradleyBoutcher BradleyBoutcher left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@izgeri
Copy link

izgeri commented May 6, 2020

what did we decide to do with this PR? were we going to move this logic into secretless, and did we do that?

thanks!

@doodlesbykumbi
Copy link
Author

@izgeri I’m not really sure how to proceed. This PR doesn’t seem all that valuable in the backdrop of a myriad of other errors that will disclose the host name, whether we hide it here or in Secretless.

@izgeri
Copy link

izgeri commented May 12, 2020

this is one that we have control over, so we should hide it if we can (especially if we can logically do it by catching a certain type of error)

it's ok with me if we file an issue to follow up with this logic in secretless, though - @doodlesbykumbi can you file the issue, reference it here, and close this PR?

@doodlesbykumbi
Copy link
Author

Closed in favour of cyberark/secretless-broker#1229

@doodlesbykumbi doodlesbykumbi deleted the avoid-leaking-hostname-verification branch May 18, 2020 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants