From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: mx.groups.io; dkim=missing; spf=pass (domain: intel.com, ip: 134.134.136.126, mailfrom: jiaxin.wu@intel.com) Received: from mga18.intel.com (mga18.intel.com [134.134.136.126]) by groups.io with SMTP; Mon, 07 Oct 2019 23:19:49 -0700 X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga006.jf.intel.com ([10.7.209.51]) by orsmga106.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Oct 2019 23:19:49 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.67,269,1566889200"; d="scan'208";a="197606332" Received: from fmsmsx105.amr.corp.intel.com ([10.18.124.203]) by orsmga006.jf.intel.com with ESMTP; 07 Oct 2019 23:19:48 -0700 Received: from fmsmsx154.amr.corp.intel.com (10.18.116.70) by FMSMSX105.amr.corp.intel.com (10.18.124.203) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 7 Oct 2019 23:19:48 -0700 Received: from shsmsx152.ccr.corp.intel.com (10.239.6.52) by FMSMSX154.amr.corp.intel.com (10.18.116.70) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 7 Oct 2019 23:19:47 -0700 Received: from shsmsx107.ccr.corp.intel.com ([169.254.9.33]) by SHSMSX152.ccr.corp.intel.com ([10.239.6.52]) with mapi id 14.03.0439.000; Tue, 8 Oct 2019 14:19:46 +0800 From: "Wu, Jiaxin" To: David Woodhouse , Laszlo Ersek , "devel@edk2.groups.io" , "Wang, Jian J" , Bret Barkelew Subject: Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553) Thread-Topic: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553) Thread-Index: AQHVdOXpLhbnPHTEFEiizfw0v9ZmjadBqO+AgAKyoACAAKJOgIALFFnQ Date: Tue, 8 Oct 2019 06:19:45 +0000 Message-ID: <895558F6EA4E3B41AC93A00D163B727416F5D921@SHSMSX107.ccr.corp.intel.com> References: <20190927034441.3096-1-Jiaxin.wu@intel.com> <69774fe6-ea00-44b9-5468-c092dea6cd36@redhat.com> <8106467c9f4132c831d0aa604e897fe9d4dda12a.camel@infradead.org> In-Reply-To: <8106467c9f4132c831d0aa604e897fe9d4dda12a.camel@infradead.org> Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiNTk3YzRjZjgtZTZiYy00YTVjLTg0MmUtNDYzM2UzZTlhZmZmIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiNnRSTlhhQ3JrNXlHeGEzTmZySlJNR1ZXdDAxOUV5UEtGaWdJbHNsQkx2NkUrQWtJOHFKZHdmZ0ZKWUhNWWxJMiJ9 x-ctpclassification: CTP_NT dlp-product: dlpe-windows dlp-version: 11.2.0.6 dlp-reaction: no-action x-originating-ip: [10.239.127.40] MIME-Version: 1.0 Return-Path: jiaxin.wu@intel.com Content-Language: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGF2aWQsDQoNCkkganVzdCByZWFsaXplZCB5b3UgaGF2ZSB0aGUgY29tbWVudHMgb24gQnVn emlsbGEgOTYwOiANCg0KPiIuLi5naXZlbiB0aGF0IHRlc3RpbmcgaXMgZmFpbGluZyBhbmQgY29k ZSBpbnNwZWN0aW9uIHNob3dzIGl0IHdvdWxkIG5ldmVyIGhhdmUgYmVlbiBleHBlY3RlZCB0byB3 b3JrLiINCg0KRG8geW91IG1lYW4geW91IGRpZG4ndCBwYXNzIHRoZSB2ZXJpZmljYXRpb24gaWYg VVJMcyB3aXRoIElQdjYgbGl0ZXJhbHMgKGh0dHBzOi8vWzIwMDE6OGIwOjEwYjoxMjM2OjoxXS8p PyAgQ2FuIHlvdSBhbHNvIHNob3cgbWUgd2hlcmUgdGhlIGNvZGUgaW5zcGVjdGlvbiBpbmRpY2F0 ZWQgaXQgd291bGQgbmV2ZXIgaGF2ZSBiZWVuIGV4cGVjdGVkIHRvIHdvcms/IFdlIGRvIHBhc3Mg dGhlIHRlc3RpbmcgZm9yIHRoZSBVUkxzIHdpdGggSVB2NiBpZiB0aGUgQ04gb3IgU0FOIGluIGNl cnRpZmljYXRlIGhhcyB0aGUgY29ycmVzcG9uZGluZyBJUHY2IGFkZHJlc3MgKGF0IGxlYXN0IHdv cmtpbmcgd2l0aCBvcGVuc3NsIDEuMS4wKS4gDQoNCkZvciB0aGUgc2VyaWVzIHBhdGNoZXMgaGVy ZSwgd2UgYXJlIGludGVuZGluZyB0byBzdXBwb3J0IHRoZSBob3N0IG5hbWUgdmFsaWRhdGlvbiwg SSB0aGluayB3ZSBjYW4gY29tbWl0IHRoZSBzZXJpZXMgcGF0Y2hlcyBzaW5jZSB3ZSBwYXNzIHRo ZSB2ZXJpZmljYXRpb24gb2YgSVBWNiBVUkwsIHdoYXQgZG8geW91IHRoaW5rPw0KDQpUaGFua3Ms DQpKaWF4aW4gICAgDQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogRGF2 aWQgV29vZGhvdXNlIDxkd213MkBpbmZyYWRlYWQub3JnPg0KPiBTZW50OiBUdWVzZGF5LCBPY3Rv YmVyIDEsIDIwMTkgNTowMiBQTQ0KPiBUbzogTGFzemxvIEVyc2VrIDxsZXJzZWtAcmVkaGF0LmNv bT47IGRldmVsQGVkazIuZ3JvdXBzLmlvOyBXYW5nLCBKaWFuIEoNCj4gPGppYW4uai53YW5nQGlu dGVsLmNvbT47IFd1LCBKaWF4aW4gPGppYXhpbi53dUBpbnRlbC5jb20+OyBCcmV0IEJhcmtlbGV3 DQo+IDxCcmV0LkJhcmtlbGV3QG1pY3Jvc29mdC5jb20+DQo+IFN1YmplY3Q6IFJlOiBbZWRrMi1k ZXZlbF0gW1BBVENIIHYxIDAvNF0gU3VwcG9ydCBIVFRQUyBIb3N0TmFtZQ0KPiB2YWxpZGF0aW9u IGZlYXR1cmUoQ1ZFLTIwMTktMTQ1NTMpDQo+IA0KPiBPbiBUdWUsIDIwMTktMTAtMDEgYXQgMDE6 MjEgKzAyMDAsIExhc3psbyBFcnNlayB3cm90ZToNCj4gPiBPbiAwOS8yOS8xOSAwODowOSwgV2Fu ZywgSmlhbiBKIHdyb3RlOg0KPiA+ID4gRm9yIHRoaXMgcGF0Y2ggc2VyaWVzLA0KPiA+ID4gMS4g IiBDb250cmlidXRlZC11bmRlcjogVGlhbm9Db3JlIENvbnRyaWJ1dGlvbiBBZ3JlZW1lbnQgMS4x IiBpcyBub3QNCj4gbmVlZGVkIGFueSBtb3JlLg0KPiA+ID4gICBSZW1vdmUgaXQgYXQgcHVzaCB0 aW1lIGFuZCBubyBuZWVkIHRvIHNlbmQgYSB2Mi4NCj4gPiA+IDIuIFNpbmNlIGl0J3Mgc2VjdXJp dHkgcGF0Y2ggd2hpY2ggaGFkIGJlZW4gcmV2aWV3ZWQgc2VwYXJhdGVseSwgSSBzZWUgbm8NCj4g cmVhc29uIGZvciBuZXcgci1iDQo+ID4gPiAgIHJlcXVpcmVkLiBQbGVhc2UgcmFpc2UgaXQgYXNh cCBpZiBhbnkgb2JqZWN0aW9ucy4NCj4gPiA+IDMuIEFja2VkLWJ5OiBKaWFuIEogV2FuZyA8amlh bi5qLndhbmdAaW50ZWwuY29tPg0KPiA+DQo+ID4NCj4gPiAqIENhbiB5b3UgcGxlYXNlIGNvbmZp cm0gdGhhdCB0aGVzZSBwYXRjaGVzIG1hdGNoIHRob3NlIHRoYXQgd2UNCj4gPiBkaXNjdXNzZWQg aGVyZToNCj4gPg0KPiA+IGh0dHBzOi8vYnVnemlsbGEudGlhbm9jb3JlLm9yZy9zaG93X2J1Zy5j Z2k/aWQ9OTYwI2MxOA0KPiA+IGh0dHBzOi8vYnVnemlsbGEudGlhbm9jb3JlLm9yZy9zaG93X2J1 Zy5jZ2k/aWQ9OTYwI2MxOQ0KPiA+DQo+ID4NCj4gPiAqIEluIHRoZSBCWiwgRGF2aWQgYW5kIEJy ZXQgcmFpc2VkIHNvbWUgcXVlc3Rpb25zOg0KPiA+DQo+ID4gaHR0cHM6Ly9idWd6aWxsYS50aWFu b2NvcmUub3JnL3Nob3dfYnVnLmNnaT9pZD05NjAjYzMxDQo+ID4gaHR0cHM6Ly9idWd6aWxsYS50 aWFub2NvcmUub3JnL3Nob3dfYnVnLmNnaT9pZD05NjAjYzMyDQo+ID4gaHR0cHM6Ly9idWd6aWxs YS50aWFub2NvcmUub3JnL3Nob3dfYnVnLmNnaT9pZD05NjAjYzM1DQo+ID4gaHR0cHM6Ly9idWd6 aWxsYS50aWFub2NvcmUub3JnL3Nob3dfYnVnLmNnaT9pZD05NjAjYzM2DQo+ID4NCj4gPiBhbmQN Cj4gPg0KPiA+IGh0dHBzOi8vYnVnemlsbGEudGlhbm9jb3JlLm9yZy9zaG93X2J1Zy5jZ2k/aWQ9 OTYwI2M0MA0KPiA+DQo+ID4gVGhlIGxhdGVzdCBjb21tZW50IGluIHRoZSBidWcgaXMgYyM0MS4g SSdtIG5vdCB1bmRlciB0aGUgaW1wcmVzc2lvbiB0aGF0DQo+ID4gYWxsIGNvbmNlcm5zIHJhaXNl ZCBieSBEYXZpZCBhbmQgQnJldCBoYXZlIGJlZW4gYWRkcmVzc2VkIChvcg0KPiA+IGFiYW5kb25l ZCkuIEknZCBsaWtlIERhdmlkIGFuZCBCcmV0IHRvIEFDSyB0aGUgcGF0Y2hlcy4NCj4gDQo+IEkg ZG8gbm90IGJlbGlldmUgbXkgY29tbWVudCAjMzUgaGFzIGJlZW4gYWRkcmVzc2VkLCBub3IgdGhl IHJlcXVlc3RlZA0KPiB0ZXN0aW5nIHBlcmZvcm1lZC4NCg==