You bring up NGINX+, a commercial product with a CVE reporting policy, but just ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

conartist6 on Feb 15, 2024 | parent | context | favorite | on: Freenginx: Core Nginx developer announces fork

You bring up NGINX+, a commercial product with a CVE reporting policy, but just from reading the docs on it it doesn't support QUIC or HTTP/3. So I guess I can see why the maintainer would be mad about a commercial policy applying to noncommercial work in the absence of any real threat.

MZMegaZone on Feb 15, 2024 [–]

https://www.nginx.com/blog/quic-http3-support-openssl-nginx/

I know there are other mentions - it's been in the commercial product since R30, hence the CVE.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact