From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mga06.intel.com (mga06.intel.com [134.134.136.31]) by mx.groups.io with SMTP id smtpd.web12.1589.1570675552145609080 for ; Wed, 09 Oct 2019 19:45:52 -0700 Authentication-Results: mx.groups.io; dkim=missing; spf=pass (domain: intel.com, ip: 134.134.136.31, mailfrom: jiaxin.wu@intel.com) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga003.jf.intel.com ([10.7.209.27]) by orsmga104.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 09 Oct 2019 19:45:51 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.67,278,1566889200"; d="scan'208";a="197104880" Received: from fmsmsx107.amr.corp.intel.com ([10.18.124.205]) by orsmga003.jf.intel.com with ESMTP; 09 Oct 2019 19:45:51 -0700 Received: from fmsmsx156.amr.corp.intel.com (10.18.116.74) by fmsmsx107.amr.corp.intel.com (10.18.124.205) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 9 Oct 2019 19:45:50 -0700 Received: from shsmsx105.ccr.corp.intel.com (10.239.4.158) by fmsmsx156.amr.corp.intel.com (10.18.116.74) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 9 Oct 2019 19:45:50 -0700 Received: from shsmsx107.ccr.corp.intel.com ([169.254.9.33]) by SHSMSX105.ccr.corp.intel.com ([169.254.11.96]) with mapi id 14.03.0439.000; Thu, 10 Oct 2019 10:45:48 +0800 From: "Wu, Jiaxin" To: David Woodhouse , Laszlo Ersek , "devel@edk2.groups.io" , "Wang, Jian J" , Bret Barkelew CC: Richard Levitte Subject: Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553) Thread-Topic: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553) Thread-Index: AQHVdOXpLhbnPHTEFEiizfw0v9ZmjadBqO+AgAKyoACAAKJOgIALFFnQgAFrQQCAAbf3QA== Date: Thu, 10 Oct 2019 02:45:48 +0000 Message-ID: <895558F6EA4E3B41AC93A00D163B727416F5F9F5@SHSMSX107.ccr.corp.intel.com> References: <20190927034441.3096-1-Jiaxin.wu@intel.com> <69774fe6-ea00-44b9-5468-c092dea6cd36@redhat.com> <8106467c9f4132c831d0aa604e897fe9d4dda12a.camel@infradead.org> <895558F6EA4E3B41AC93A00D163B727416F5D921@SHSMSX107.ccr.corp.intel.com> <777053db79600eb90a19945700293d14f4978344.camel@infradead.org> In-Reply-To: <777053db79600eb90a19945700293d14f4978344.camel@infradead.org> Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiOTk1YmQ5ZDQtNzE2NS00MTBmLTg4YjQtZTM0ZmQ1OTQyMmQ3IiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiRlhvWmVSSStUT3RMN2ZQVE1LUG9OUThHUkRxU3gzaFkrOEdYSXhMYnhSeDNcLzJsdFFHc3BUTisxcHlsVmlzYVQifQ== x-ctpclassification: CTP_NT dlp-product: dlpe-windows dlp-version: 11.2.0.6 dlp-reaction: no-action x-originating-ip: [10.239.127.40] MIME-Version: 1.0 Return-Path: jiaxin.wu@intel.com Content-Language: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 PiANCj4gSSBoYXZlIG5vdCB0ZXN0ZWQgdGhpcywgYnV0IEkgc3RhcnRlZCBsb29raW5nIHdoZW4g dGhlcmUgd2FzIGEgbWVzc2FnZQ0KPiBvbiB0aGUgZWRrMiBsaXN0IGZyb20gc29tZW9uZSB3aG8g d2FzIHJlcG9ydGluZyB0aGF0IGl0IGRpZG4ndCB3b3JrIGZvcg0KPiBJUHY2IFVSSXMsIElJUkMu DQo+IA0KPiBZb3UgYXJlIHVzaW5nIFNTTF9zZXQxX2hvc3QoKSwgYW5kIEkgYmVsaWV2ZSB5b3Un cmUganVzdCBwYXNzaW5nIGluIHRoZQ0KPiBiYXJlIGhvc3RuYW1lIHBhcnQgb2YgdGhlIFVSSSwg YmUgaXQgIjEuMi4zLjQiIG9yICJbMjAwMTo4YjA6MTBiOjo1XSIuDQoNCkhlcmUsIEkgd2FudCB0 byBoaWdobGlnaHQgaXMgdGhhdCBVRUZJIFRMUyBvbmx5IHByb3ZpZGVzIHRoZSAqSG9zdE5hbWUq IHZlcmlmaWNhdGlvbiBpbnRlcmZhY2UgdG8gdXBwZXIgZHJpdmVyIChIdHRwRHhlKSwgbm90IHRo ZSBJUC9lbWFpbCB2ZXJpZmljYXRpb24gY2FwYWJpbGl0eS4gUGxlYXNlIHJlZmVyIHRvIFVFRkkg U3BlYzIuOCBzZWN0aW9uIDI4LjEwLjI6ICAgICANCiAgICAiLi4uVExTIHNlc3Npb24gaG9zdG5h bWUgZm9yIHZhbGlkYXRpb24gd2hpY2ggaXMgdXNlZCB0byB2ZXJpZnkgd2hldGhlciB0aGUgbmFt ZSB3aXRoaW4gdGhlIHBlZXIgY2VydGlmaWNhdGUgbWF0Y2hlcyBhIGdpdmVuIGhvc3QgbmFtZS4u LiIgDQpJbiB1cHBlciBVRUZJIEhUVFAgZHJpdmVyLCB3ZSBnZXQgdGhlIGhvc3RuYW1lIGZyb20g VVJJIGRpcmVjdGx5IG5vIG1hdHRlciBpdCdzIHRoZSByZWFsIEZRRE4gKHd3dy54eHguY29tKSBv ciBJUCBhZGRyZXNzIGZvcm1hdCBzdHJpbmcgKDEuMi4zLjQgb3IgMjAwMTo4YjA6MTBiOjo1IChu b3QgIlsyMDAxOjhiMDoxMGI6OjVdKSksIGFuZCBzZXQgaXQgdG8gdGhlIFRMUyBob3N0bmFtZSBm aWxlZCB2aWEgdGhlIGludGVyZmFjZSAtLSBFRklfVExTX1ZFUklGWV9IT1NULiBUaGF0J3MgaW1w bGVtZW50YXRpb24gY2hvaWNlIGZvciBIdHRwRHhlIHRvIGFjaGlldmUgdGhlIEhUVFBTIEhvc3RO YW1lIHZhbGlkYXRpb24gZmVhdHVyZSBieSBmb2xsb3dpbmcgdGhlIHN0YW5kYXJkIFRMUyBIb3N0 TmFtZSB2ZXJpZmljYXRpb24gY2FwYWJpbGl0eS4NCiAgDQo+IA0KPiBUaGF0IGp1c3QgYWRkcyBp dCB0byB0aGUgJ2hvc3RzJyBsaXN0IGluIHRoZSBYNTA5X1ZFUklGWV9QQVJBTSBmb3IgdGhlDQo+ IFNTTCBjb25uZWN0aW9uLg0KDQpZZXMuDQoNCj4gDQo+IEluIHRoZSBjaGVja19ob3N0cygpIGZ1 bmN0aW9uIGluIG9wZW5zc2wvY3J5cHRvL3g1MDkvdjUwOV92ZnkuYywgdGhlDQo+IGNvZGUgc2lt cGx5IGl0ZXJhdGVzIG92ZXIgdGhlIG1lbWJlcnMgb2YgdGhhdCBsaXN0LCBjYWxsaW5nDQo+IFg1 MDlfY2hlY2tfaG9zdCgpIGZvciBlYWNoIG9uZS4gSXQgbmV2ZXIgY2FsbHMgWDUwOV9jaGVja19p cCgpLg0KDQpZZXMuDQoNCj4gDQo+IElmIHlvdSBsb29rIGluIG9wZW5zc2wvY3J5cHRvL3g1MDkv djNfdXRsLmMgeW91IGNhbiBzZWUgdGhlDQo+IFg1MDlfY2hlY2tfaG9zdCgpIHJlYWxseSBkb2Vz IG9ubHkgY2hlY2sgaG9zdG5hbWVzLiANCg0KWWVzLg0KDQo+IFlvdSdkIG5lZWQgdG8gY2FsbCBY NTA5X2NoZWNrX2lwX2FzYygpIHRvIGNoZWNrIGhvc3RuYW1lcy4gQW5kIHNvbWV0aGluZyB3b3Vs ZCBuZWVkIHRvDQo+IGhhdmUgc3RyaXBwZWQgdGhlIFtdIHdoaWNoIHN1cnJvdW5kIGFuIElQdjYg bGl0ZXJhbC4NCj4gDQoNCkRpc2FncmVlLCB3aHkgbmVlZCBjaGVjayB0aGUgSVAgaGVyZSBzaW5j ZSB3ZSBvbmx5IGZvY3VzIG9uIHRoZSBob3N0bmFtZSB2ZXJpZmljYXRpb24/IEZvciBIdHRwRHhl IGRyaXZlciwgaXQncyB0aGUgaW1wbGVtZW50YXRpb24gY2hvaWNlIHRvIHRyZWF0IHRoZSBJUCBp biBVUkkgYXMgaG9zdG5hbWUgc3RyaW5nIGZvcm1hdC4gQXMgSSBzYWlkIGJlZm9yZSBpbiB0aGUg ZW1haWwsIGlmIHRoZSBDTiBvciBTQU4gKFNlZW1zIG9ubHkgaW4gWDUwOSBWMykgaW4gdGhlIGNl cnRpZmljYXRlIGFyZSBzZXQgY29ycmVjdGx5LCBpdCBzaG91bGQgYmUgT0sgdG8gcGFzcyB0aGUg dmVyaWZpY2F0aW9uLiBMYXN6bG8gYW5kIEkgYWxyZWFkeSBoYXZlIHZlcmlmaWVkIHRoYXQuDQoN Cj4gSSBjYW4ndCBzZWUgaG93IHRoaXMgY2FuIHdvcmsuIEhhdmUgeW91IHRlc3RlZCBpdCBzaW5j ZSB0aGUgcmVwb3J0IG9uDQo+IHRoZSBsaXN0IHRoYXQgaXQgd2Fzbid0IHdvcmtpbmc/DQo+IA0K DQpTb3JyeSwgSSBjYW4ndCByZW1lbWJlciB0aGVyZSBpcyBhbnkgZmFpbHVyZSBvZiBJcHY2IFVS SSByZXBvcnRlZCBmcm9tIGVkazIuIElmIHlvdSBjYW4gZmluZCBpdCwgdGhhdCB3aWxsIGJlIGJl dHRlci4NCg0KPiBjZi4gaHR0cHM6Ly9naXRodWIuY29tL29wZW5zc2wvb3BlbnNzbC9wdWxsLzky MDEgd2hpY2ggaXMgYmVpbmcgaWdub3JlZA0KPiBieSB0aGUgT3BlblNTTCBkZXZlbG9wZXJzIOKA lCBPcGVuU1NMIHJlYWxseSBkb2Vzbid0IG1ha2UgbGlmZSBlYXN5IGZvcg0KPiB5b3UgaGVyZSwg d2hpY2ggaXMgYSBzaGFtZS4NCj4gDQo+IA0KPiA+IEZvciB0aGUgc2VyaWVzIHBhdGNoZXMgaGVy ZSwgd2UgYXJlIGludGVuZGluZyB0byBzdXBwb3J0IHRoZSBob3N0DQo+ID4gbmFtZSB2YWxpZGF0 aW9uLCBJIHRoaW5rIHdlIGNhbiBjb21taXQgdGhlIHNlcmllcyBwYXRjaGVzIHNpbmNlIHdlDQo+ ID4gcGFzcyB0aGUgdmVyaWZpY2F0aW9uIG9mIElQVjYgVVJMLCB3aGF0IGRvIHlvdSB0aGluaz8N Cj4gDQo+IElmIGl0IHBhc3NlcyB0aGUgdmVyaWZpY2F0aW9uIG9mIElQdjYgbGl0ZXJhbHMsIHRo ZW4gYWxsIG15IGFuYWx5c2lzIGlzDQo+IGJyb2tlbiBhbmQgc28gd2FzIHRoZSByZXBvcnQgb24g dGhlIGxpc3QgdGhhdCBwcm9tcHRlZCBtZSB0byBzdGFydA0KPiBsb29raW5nIChvciBJJ20gbWlz cmVtZW1iZXJpbmcgdGhhdCByZXBvcnQpLiBJbiB0aGF0IGNhc2UsIHN1cmUsIGdvDQo+IGFoZWFk IGFuZCBjb21taXQuDQo+IA0KPiA+IFRoYW5rcywNCj4gPiBKaWF4aW4NCg0K