Demi Marie Obenour

Could that be used to make a thin_dedup tool?

> I think Demi is looking for a tool to deduplicate thin volumes in-place. That’s correct. My goal is to be able to reclaim shared space on a Qubes OS...

> A particular use case for Qubes: when backing up and then restoring thin LVs that were snapshots (e.g. of cloned QubesOS VMs), using most methods, one usually ends up...

> We have WPACKET which is basically that. We just need to use it where appropriate. I consider all parsing of untrusted data to be appropriate uses. In particular, this...

And the punycode implementation.

> So, if your suggestion is that OpenSSL shouldn't parse the email address (because only the DNS name is relevant), even if a name constraint is imposed on email addresses,...

> It's difficult for a general-purpose X.509 library to get away from doing so, especially since the spec requires _all_ constraints to be enforced during validation. Building and validating the...

@kroeckx: one option would be to pass a boolean argument to the ASN.1 parsing functions. @paulidale: I agree that this would be ideal. At least in the case of certificates,...

> We'd need new functions for it (which nobody would use, at least initially). At a minimum, OpenSSL could use the new functions internally. If new functions are going to...

> A solution could be for vault to skip writing the certificate to the filesystem and just issue it "virtually" - instead of a ssl referencing the filesystem, it could...