Matthias Fischmann

Yes, I understand that, but why? From my (still limited) understanding, the power of an adversary to request authentication responses does not lead to any dangerous attacks. The attacker still...

Brute force should be prevented by throttling on the IdP side, but you do have a point in that it's always better to have two counter-measures than one. I will...

Heyo, this is working as intended (which of course doesn't mean that it's correct :-). Off the top of my head (I only remember we discussed this internally, but I'm...

Here is some code for bilge that didn't make it out of #722: ```diff diff --git a/libs/bilge/src/Bilge/IO.hs b/libs/bilge/src/Bilge/IO.hs index 667b202d..87fd11dc 100644 --- a/libs/bilge/src/Bilge/IO.hs +++ b/libs/bilge/src/Bilge/IO.hs @@ -34,6 +34,7 @@ module...

(@franziskuskiefer you probably want to just check out https://github.com/wireapp/wire-server/blob/lh-docs/docs/reference/team/legalhold.md; @smatting requesting your review to get this merged soon, please just take a quick glance if there are any wild inaccurracies.)

Thanks for reporting this. We have seen this error, but have not had time to investigate. Do you have the option of running wire-server on Ubuntu? If not, and if...

I stand corrected by @tiago-loureiro (-: We *have* taken the time to investigate, and we found that the problem occurs if you have different versions of either openssl or libssl...

> Now I run wire-server component on Ubuntu 16.0.4 seems without any visible issue. Excellent. Please leave the issue open in any case for people who want to use Debian.

the exception is thrown synchronously [here](https://github.com/wireapp/wire-server/blob/2df99d8d599385862e513f70bda70c49eb7f50cf/services/brig/src/Brig/Data/Activation.hs#L128): if you `error` out before this line (after `mkActivationKey` has returned), it throws; after that line the puzzling ssl-non-ssl-error is thrown in stead.

see also: https://github.com/wireapp/wire-server/pull/661 we may want to try to reproduce this on that version of cql-io.