Thank you Maxime, On Fri, Jul 22, 2022 at 2:44 AM Maxime Devos <maximede...@telenet.be> wrote:
> On 22-07-2022 02:44, Aleix Conchillo Flaqué wrote: > > ping. easy one but might be more controversial. > > On Wed, Feb 2, 2022 at 4:26 PM Aleix Conchillo Flaqué < > aconchi...@gmail.com> wrote: > >> Using INADDR_ANY instead of INADDR_LOOPBACK makes it convenient when >> starting the web server inside containers > > I don't see what containers have to do with anything? If you want it to > access the Internet, just don't do a network container (don't create a new > network namespace). Or to reduce access, do create a new network namespace > but set up port forwarding (which I would expect to work with loopback). > Now that I read it again, I have no clue what containers have to do with this either, especially because I never run Guile in a container... So, forget about the container reference. > without the need to having to >> specify INADDR_ANY all the time. >> > I don't recommend this as a default, as it opens up potential security > problems (some programs open a web server for local communication on the > computer). INADDR_LOOPBACK is a safe default, anyone needing something else > and knowing their use is safe can easily override to INADDR_ANY. > > This is the default in most libraries and languages. > > Is ad populum. Plenty of bad choices have been made in the past, see e.g. > all the CVEs, so I don't think this is a good argument. (It is an argument > if you are switching to INADDR_ANY for _consistency_, but the patch appears > to be for other purposes.) > > Makes sense. Thank you for the reply! Best, Aleix
