From owner-freebsd-security@FreeBSD.ORG  Mon Apr 14 05:04:28 2014
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id DA2E6501;
 Mon, 14 Apr 2014 05:04:28 +0000 (UTC)
Received: from mail-we0-x22f.google.com (mail-we0-x22f.google.com
 [IPv6:2a00:1450:400c:c03::22f])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 4C2941048;
 Mon, 14 Apr 2014 05:04:28 +0000 (UTC)
Received: by mail-we0-f175.google.com with SMTP id q58so7708057wes.34
 for <multiple recipients>; Sun, 13 Apr 2014 22:04:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:reply-to:in-reply-to:references:date:message-id
 :subject:from:to:cc:content-type;
 bh=JtwrsHIBN/pCrDqJVID9mcMhIfbVvAw22Yj2E5Wdxlc=;
 b=BcBwjbx3BPBi9qtjtseIr80ERFBni5ae2y4T/jhEaCO3trDXKnvi7zCxlnURZHQyjn
 QG+ZhykRqUcyZ5q8smjqbEJ5BRmu2vKqM6a+ZszCVa+qAUrduwzr8FecLQHcyZWSOMUX
 guzwp6QNLYgz/waSmmw1iGOi16u3/6Ly+JqvrZAp8xhGhJFMHVkBgFYXMm5dcIgsqjwa
 1ay4jYVq+2i6nxN+46uAiUFFg7FUc9Rms7dGsObYTxoC1EPi4T9Gczo4SMu3nl7hi6vU
 Dz/tM5QYwf+UjzuCJnxxG2a2A6Adk/5XIc80Uoytq9GyJVJtPq84J+nNuw0YW5++voPF
 3dhg==
MIME-Version: 1.0
X-Received: by 10.180.23.99 with SMTP id l3mr7923126wif.47.1397451866371; Sun,
 13 Apr 2014 22:04:26 -0700 (PDT)
Received: by 10.217.55.138 with HTTP; Sun, 13 Apr 2014 22:04:26 -0700 (PDT)
In-Reply-To: <CAHAXwYBWScbTOkdYFDRrh0faKb3BjX2gXmWhNbG-Gjfn4DLf0A@mail.gmail.com>
References: <CAHAXwYCGkP-o0VvMXj5S8-KNA45aTvy+srjDL_=8-x9Dza5z5Q@mail.gmail.com>
 <53472B7F.5090001@FreeBSD.org>
 <CAHAXwYDdxbRimwjvPf+5odYUUN4u4rNzdEkEmWwZN97mi1riEg@mail.gmail.com>
 <53483074.1050100@delphij.net>
 <CAHAXwYDhxmEwxtBLyZF1R1F8XENsq4FbpzVy89BN8f+RYU74KA@mail.gmail.com>
 <44bnw5uwmm.fsf@lowell-desk.lan>
 <CAHAXwYBDWEUH2yDR59Aurbsrjn4W0JAH87Qk7Oumncwagu45Bg@mail.gmail.com>
 <86zjjosxyy.fsf@nine.des.no>
 <CAHAXwYBWScbTOkdYFDRrh0faKb3BjX2gXmWhNbG-Gjfn4DLf0A@mail.gmail.com>
Date: Mon, 14 Apr 2014 00:04:26 -0500
Message-ID: <CAHAXwYCYq6_S6P3Z56LNdpVgUj2y53U0Xd3_aOQfXECQ73FzJQ@mail.gmail.com>
Subject: Re: Retiring portsnap [was MITM attacks against portsnap and
 freebsd-update]
From: David Noel <david.i.noel@gmail.com>
To: =?ISO-8859-1?Q?Dag=2DErling_Sm=F8rgrav?= <des@des.no>
Content-Type: text/plain; charset=ISO-8859-1
Cc: Lowell Gilbert <freebsd-security-local@be-well.ilk.org>,
 freebsd-security@freebsd.org, security@freebsd.org
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: David.I.Noel@gmail.com
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Apr 2014 05:04:28 -0000

On 4/13/14, David Noel <david.i.noel@gmail.com> wrote:
>> So by your definition, every single Apache server on the planet runs "a
>> closed source fork of the open source Apache project" because they do
>> not use the exact same httpd.conf?
>
> Ah, you're right. That's from build.conf. My mistake.

Though if it's using spiped I'm not sure how it would doing that from
purely a config file change.