Some of the bits are enumerated here:
https://bugzilla.mozilla.org/show_bug.cgi?id=572659#c55

Though it might not be our aim, minor versions haven't always been
non-web-breaking.  We may not add a new feature, but tweak how one
works, and that could cause web sites to behave differently if they rely
on the old (flawed) behavior and we change that.

-Sid

On 09/24/2010 10:30 AM, Devdatta Akhawe wrote:
>> If we see it being abused by focused attacks, we should definitely
>> revisit the balance discussion, but breaking the bits of the web that
>> legitimately benefit from this currently seems to outweigh the gain from
>> a speculatively useful attack technique.
> 
> what bits of the web legitimately benefit from knowing the minor
> version ? My understanding was that minor version changes did not
> involve new features - only security fixes
> 
> cheers
> devdatta
> 
>>
>> -Sid
>> _______________________________________________
>> dev-security mailing list
>> [email protected]
>> https://lists.mozilla.org/listinfo/dev-security
>>
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to