From owner-freebsd-security@FreeBSD.ORG  Mon Apr 14 04:38:56 2014
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id BCF2DA8F;
 Mon, 14 Apr 2014 04:38:56 +0000 (UTC)
Received: from mail-wg0-x229.google.com (mail-wg0-x229.google.com
 [IPv6:2a00:1450:400c:c00::229])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 30FBE1CA7;
 Mon, 14 Apr 2014 04:38:56 +0000 (UTC)
Received: by mail-wg0-f41.google.com with SMTP id n12so7526604wgh.0
 for <multiple recipients>; Sun, 13 Apr 2014 21:38:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:reply-to:in-reply-to:references:date:message-id
 :subject:from:to:cc:content-type;
 bh=JRJXhBDD8ZCFEMPrRVDcFsmSI7eQp26jwKm61Q6Kyok=;
 b=jFBb99G9Y/XM/XX4frN+NrGP/wvOvRRT9+fz1D4l1JTUzUssdGx3Y9HWiBIO4HZHwR
 RYUMI08CfsIgK1PyVd2feSyhz05IEi5IXo5qJHjFsnV4jv2FshibOhpEM3b5Co5KFGBt
 YlrIG8o780YbRC34vPvck+hJJGGmbXhafEyTVspiy0ZQYRj4icVnGjIkru1LA0CNq9+p
 dmepuFXTxvWRYXdhllxnTHF5ZlHUgepbxyQiET23cc/wRDMfpa01g9naeKtuw6PJnrA/
 x/8BL8dkSyVUkooo2rTvi3v87PH57ZZJI4S8YTh1ElxvDPEaBcKhlxzV7+HgzBf4t/Wr
 K6Vw==
MIME-Version: 1.0
X-Received: by 10.180.211.239 with SMTP id nf15mr7855201wic.9.1397450334367;
 Sun, 13 Apr 2014 21:38:54 -0700 (PDT)
Received: by 10.217.55.138 with HTTP; Sun, 13 Apr 2014 21:38:54 -0700 (PDT)
In-Reply-To: <86zjjosxyy.fsf@nine.des.no>
References: <CAHAXwYCGkP-o0VvMXj5S8-KNA45aTvy+srjDL_=8-x9Dza5z5Q@mail.gmail.com>
 <53472B7F.5090001@FreeBSD.org>
 <CAHAXwYDdxbRimwjvPf+5odYUUN4u4rNzdEkEmWwZN97mi1riEg@mail.gmail.com>
 <53483074.1050100@delphij.net>
 <CAHAXwYDhxmEwxtBLyZF1R1F8XENsq4FbpzVy89BN8f+RYU74KA@mail.gmail.com>
 <44bnw5uwmm.fsf@lowell-desk.lan>
 <CAHAXwYBDWEUH2yDR59Aurbsrjn4W0JAH87Qk7Oumncwagu45Bg@mail.gmail.com>
 <86zjjosxyy.fsf@nine.des.no>
Date: Sun, 13 Apr 2014 23:38:54 -0500
Message-ID: <CAHAXwYBWScbTOkdYFDRrh0faKb3BjX2gXmWhNbG-Gjfn4DLf0A@mail.gmail.com>
Subject: Re: Retiring portsnap [was MITM attacks against portsnap and
 freebsd-update]
From: David Noel <david.i.noel@gmail.com>
To: =?ISO-8859-1?Q?Dag=2DErling_Sm=F8rgrav?= <des@des.no>
Content-Type: text/plain; charset=ISO-8859-1
Cc: Lowell Gilbert <freebsd-security-local@be-well.ilk.org>,
 freebsd-security@freebsd.org, security@freebsd.org
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: David.I.Noel@gmail.com
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Apr 2014 04:38:56 -0000

> So by your definition, every single Apache server on the planet runs "a
> closed source fork of the open source Apache project" because they do
> not use the exact same httpd.conf?

Ah, you're right. That's from build.conf. My mistake.