> If we see it being abused by focused attacks, we should definitely
> revisit the balance discussion, but breaking the bits of the web that
> legitimately benefit from this currently seems to outweigh the gain from
> a speculatively useful attack technique.

what bits of the web legitimately benefit from knowing the minor
version ? My understanding was that minor version changes did not
involve new features - only security fixes

cheers
devdatta

>
> -Sid
> _______________________________________________
> dev-security mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/dev-security
>
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to