https://googleprojectzero.blogspot.com/2017/12/apacolypse-now-exploiting-windows-10-in_18.html has some good background on the issues around PAC. When I filed this, I had forgotten that WPAD was a distinct spec from PAC; do we support WPAD? It looks like yes, but I'm not sure if it's on by default or not.
Depends on: socket-proc
Priority: -- → P3
(In reply to Alex Gaynor [:Alex_Gaynor] from comment #1) > https://googleprojectzero.blogspot.com/2017/12/apacolypse-now-exploiting- > windows-10-in_18.html has some good background on the issues around PAC. > > When I filed this, I had forgotten that WPAD was a distinct spec from PAC; > do we support WPAD? It looks like yes, but I'm not sure if it's on by > default or not. We do support WPAD, but not by default. The user has to manually enable it in the proxy settings.
You need to log in before you can comment on or make changes to this bug.