mirror of
https://github.com/KumoCorp/kumomta.git
synced 2026-09-07 16:01:25 +00:00
This fixes an issue where the cache being scoped globally could allow the same IP/domain combination to appear to be satisfied by an earlier authenticated session with the same IP/domain combination, for a period of 60 seconds (the default TTL that we used for that cache). This commit moves the cache to be smaller and more focused in scope; now each session remembers the last few domains (bounded, to avoid a trivial DoS by a malicious client) made on it. closes: https://github.com/KumoCorp/kumomta/issues/320