Alex Vandiver

They [brag that they change the domains every 45 days](https://10minutemail.net/about.html), so this may not be very effective in the game of whack-a-mole.

> There's also a 1s sleep in the `error_retry` in `do_api_query`, but I'm not sure if we want that to have backoff too? I think we certainly should. If we...

Thanks for the update!

Noooope, too quick a search/replace, this clearly can't help. Let me dig a little deeper.

AFAICT `py_binary` should [always get a python2 unless one asks otherwise](https://docs.bazel.build/versions/master/be/python.html#py_binary.default_python_version), and the command is invoked by Bazel itself. But `bazel build //node/tools/npm:install` indeed produces a `bazel-bin/node/tools/npm/install` which starts with...

Ah -- it's not the shebang line on that, it's the `PYTHON_BINARY = 'python'` line that Bazel generates. @francolamping, a workaround would be to pass `--python_path=$(which python2.7)` to your Bazel...

This is also something that we just ran into -- if you want to make sure that callers handle the exceptional case, it seems like raising an exception is the...

I've succeeded in bending `openssl ca` to my whims; I'll push a few commits to document and make use of it tomorrow.

Pushed 4.2/smime-subjectaltname with tests. Will follow up with the commits to resolve this issue atop those.

Bugfixes are branched from the earliest supported release that the bug was found in. After it's merged into 4.2-trunk, 4.2-trunk will be merged up to 4.4-trunk, thus picking up the...