Jacob Hoffman-Andrews

By the way, my experience of this category of problem is that it is often caused by a firewall that silently drops idle TCP connections (that is, without sending a...

Hi @manunio! Thanks for working on this. Looking at https://github.com/google/oss-fuzz/pull/8373, it appears your fuzz target fetches an arbitrary URL with arbitrary headers. My understanding is that a good fuzz target...

Hi @manunio! Thanks for the ping. I still think your pull request to oss-fuzz has a problem: it is trying to make a "real" network request. You pointed out that...

Let's Encrypt is planning to use a cross-sign past the root's expiration date, in order to extend our Android compatibility: https://letsencrypt.org/2020/12/21/extending-android-compatibility.html. This will cause problems for certain versions of OpenSSL:...

I think just one such case would be sufficient for our needs.

It's not clear to me from DigiCert's blog post whether they have any certificate chains that meet these criteria. However, from @agwa's blog post at https://www.agwa.name/blog/post/fixing_the_addtrust_root_expiration, it appears that Sectigo's...

I added the DCO but now I'm getting a seemingly unrelated Travis failure: ``` package golang.org/x/tools/go/loader: unrecognized import path "golang.org/x/tools/go/loader" (parse https://golang.org/x/tools/go/loader?go-get=1: no go-import meta tags ()) ```

I generated the list by running the haproxy_exporter and curling the metrics port, then running it through a handful of string replacements in Vim. I could systematize that process and...

Ping on this?

Just that it's nicer to emit directly the output we want rather than spending CPU to re-parse and re-emit. However, the project I wanted this for (rustdoc) has since moved...