Julien

(This is YOLO quality so it's not on github)

I'd merge that.

Certainly. The main problem is process_request_duration which now uses the normalized second (https://prometheus.io/docs/practices/naming/#base-units). For the rest, we could offer recording rules or relabel configs to ease the transition and release...

https://github.com/prometheus/prometheus/issues/1377

It's not niche, but it should be implemented consistently across all probes. Also I think allowlisting could be useful as well. I'd like to see a design document about allow/deny...

> @roidelapluie, this approach doesn't seem to work very well, given that there may be multiple layers of transport. Can you be more explicit?

Hello @bobrik . Now the HTTP client supports passing special dialcontext funcs so we could implement all this in the blackbox exporter: https://github.com/prometheus/common/pull/291

This has been discussed before and we did not reach a consensus in Prometheus team whether we want it or not.

I have made this bug public because it seems that the security issue is not at the Blackbox Exporter level, which sends the correct encoding, but that it is a...

This would probably cause a lot of cardinality. What is your plan exactly? Could you provide an example of metrics?