nginx 1.17.10 release

Formed master branch release nginx 1.17.10, within which the development of new features continues (in a parallel supported stable branch 1.16 only changes related to the elimination of serious errors and vulnerabilities are made).

In the new version implemented new directive "auth_delay", which allows you to add a delay for unauthorized requests with a 401 response code to reduce the intensity of password guessing and protection against attacks, manipulating the measurement of the execution time of operations (timing attack) when accessing systems with limited access password, subquery result or JWT (JSON Web Token).

Source: opennet.ru

Add a comment