Post #2593010
2026-04-30 02:47 UTC
@equinox@chaos.social dalias also recommends blocking AF_ALG entirely or even compiling it out, so…
Replies (1)
-
@equinox@chaos.social 2026-04-30 02:56
@mirabilos@toot.mirbsd.org sure, if that's your choice then that's your choice. I have written code for AF_ALG and I run IPsec. (without ESNs, because that's the default in StrongSwan, and I haven't had reason to worry about rekeying.) I know who @dalias@hachyderm.io is and I greatly respect them for their work on musl. But I'll stick with my opinion until someone claims at least the same experience level as I have. Maybe that's dalias, maybe not, idk their skills on this.