[FFmpeg-devel] [PATCH] ipfsgateway: Remove default gateway

Derek Buitenhuis derek.buitenhuis at gmail.com
Mon Aug 15 22:35:18 EEST 2022


On 8/10/2022 11:27 PM, Derek Buitenhuis wrote:
> A gateway can see everything, and we should not be shipping a hardcoded
> default from a third party company; it's a security risk.
> 
> Signed-off-by: Derek Buitenhuis <derek.buitenhuis at gmail.com>
> ---
>  libavformat/ipfsgateway.c | 11 ++++-------
>  1 file changed, 4 insertions(+), 7 deletions(-)

I've been asked by almost all the active developers on FFmpeg at this
point to push this while we debate the error message, gateway list / solution,
nuking, etc.

I quintuple checked on IRC it was OK for me to push in the meantime. Logs are
there.

Many distros/packagers have already backported this patch to 5.1 themselves,
as they really (shockingly) do not want a default gateway.

So: Pushed.

Let us continue the discusion on the other aspects of this topic.

(Please do not send me hate mail or harassment. I really did check.)

- Derek


More information about the ffmpeg-devel mailing list