[RESOLVED] NAT Pinning rule question

[barbaz]

I would like to try out Icedove-UXP, but the ABE NAT Pinning Rule is blocking the download links - https://wiki.hyperbola.info/doku.php?id ... cedove-uxp

If I add exception for this, will I be vulnerable to NAT pinning?

[Giorgio Maone]

What does your exception look like?

[barbaz]

I haven't added one, but if I did I would probably try this -

Code: Select all

Site https://repo.hyperbola.info:50000/* https://git.hyperbola.info:50100/*
Accept from ^https://(?:[^/:]+\.)?hyperbola\.info[/:]

[Giorgio Maone]

I haven't added one, but if I did I would probably try this -

Code: Select all

Site https://repo.hyperbola.info:50000/* https://git.hyperbola.info:50100/*
Accept from ^https://(?:[^/:]+\.)?hyperbola\.info[/:]

That's perfectly fine: it's specific enough, and uses https, so it couldn't be used for rebinding unless the attacker owns a valid hyperbola.info certificate, which would be a bigger trouble opening for much easier attacks.

[barbaz]

Cool. Thanks Giorgio!