Comment on Support HTTP over Unix domain socketsparentComments−eqvinox2ySwitching to unix domain sockets was the recommended path, and that's only because browsers don't support them.Maybe the recommended path should have been to implement some actual security?https://lists.gnu.org/archive/html/guile-user/2016-10/msg000... > DNS rebinding attackCan't DNS rebind to a "unix socket address" — feels like that by itself would considerably improve security for anything you're working on locally?
Comments
Maybe the recommended path should have been to implement some actual security?
Can't DNS rebind to a "unix socket address" — feels like that by itself would considerably improve security for anything you're working on locally?