Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-21 Thread Roger Price
On 20.03.22 16:02, Roger Price wrote: I received the following comment from the Independent Submissions Editor (ISE): The command VER is hazardous because it encourages exploiting of implementation peculiarities that are not well documented in a protocol.  The best example of such a failure is

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-21 Thread Manuel Wolfshant
On 3/21/22 15:08, Greg Troxel wrote: Matus UHLAR - fantomas writes: On 20.03.22 16:02, Roger Price wrote: I received the following comment from the Independent Submissions Editor (ISE): The command VER is hazardous because it encourages exploiting of implementation peculiarities that are

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-21 Thread Greg Troxel
Matus UHLAR - fantomas writes: > On 20.03.22 16:02, Roger Price wrote: >>I received the following comment from the Independent Submissions Editor >>(ISE): >> >> The command VER is hazardous because it encourages exploiting of >> implementation peculiarities that are not well documented in a >>

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-21 Thread Matus UHLAR - fantomas
On 20.03.22 16:02, Roger Price wrote: I received the following comment from the Independent Submissions Editor (ISE): The command VER is hazardous because it encourages exploiting of implementation peculiarities that are not well documented in a protocol.  The best example of such a failure is

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-20 Thread Harlan Stenn via Nut-upsuser
On 3/20/2022 2:15 PM, Manuel Wolfshant wrote: On 3/20/22 22:02, gene heskett wrote: ... Even better, hide your local network by getting a good router, reflashing it to something like dd-wrt or its ilk, and using it to NAT your local net somewhere in the 192.168.xxx.yyy address space but which

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-20 Thread Manuel Wolfshant
On 3/21/22 00:41, Greg Troxel wrote: Manuel Wolfshant writes: Connected to outlook-com.olc.protection.outlook.com.. Escape character is '^]'. 220 VE1EUR03FT022.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Sun, 20 Mar 2022 22:20:44 + |_ssl-date:

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-20 Thread Greg Troxel
Manuel Wolfshant writes: > Connected to outlook-com.olc.protection.outlook.com.. > Escape character is '^]'. > 220 VE1EUR03FT022.mail.protection.outlook.com Microsoft ESMTP MAIL > Service ready at Sun, 20 Mar 2022 22:20:44 + > > |_ssl-date: 2022-03-20T22:22:21+00:00; 0s from scanner time. >

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-20 Thread Manuel Wolfshant
On 3/21/22 00:11, Greg Troxel wrote: Roger Price writes: I received the following comment from the Independent Submissions Editor (ISE): The command VER is hazardous because it encourages exploiting of implementation peculiarities that are not well documented in a protocol.  The best

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-20 Thread Greg Troxel
Roger Price writes: > I received the following comment from the Independent Submissions Editor > (ISE): > > The command VER is hazardous because it encourages exploiting of > implementation peculiarities that are not well documented in a > protocol.  The best example of such a failure is

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-20 Thread Manuel Wolfshant
On 3/20/22 22:02, gene heskett wrote: On Sunday, 20 March 2022 15:10:00 EDT Manuel Wolfshant wrote: On March 20, 2022 5:02:36 PM GMT+02:00, Roger Price wrote: I received the following comment from the Independent Submissions Editor (ISE): The command VER is hazardous because it

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-20 Thread gene heskett
On Sunday, 20 March 2022 15:10:00 EDT Manuel Wolfshant wrote: > On March 20, 2022 5:02:36 PM GMT+02:00, Roger Price wrote: > >I received the following comment from the Independent Submissions Editor (ISE): > > The command VER is hazardous because it encourages exploiting of > > implementation

Re: [Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-20 Thread Manuel Wolfshant
On March 20, 2022 5:02:36 PM GMT+02:00, Roger Price wrote: >I received the following comment from the Independent Submissions Editor (ISE): > > The command VER is hazardous because it encourages exploiting of > implementation peculiarities that are not well documented in a > protocol.  The

[Nut-upsuser] ISE review of I-D: deprecate command VER?

2022-03-20 Thread Roger Price
I received the following comment from the Independent Submissions Editor (ISE): The command VER is hazardous because it encourages exploiting of implementation peculiarities that are not well documented in a protocol.  The best example of such a failure is the browser version field in HTTP.