Radar: DNS-in-HTTP draft and Python tarfile gap

IETF HTTP working group traffic and a CPython security report dominated the day. Both items stay technical and early, with direct relevance to protocol latency and archive extraction safety.

Draft embeds DNS answers in HTTP responses

Authors of draft-wobbly-dispatch-embedded-answers solicited feedback on the IETF HTTP working group list. The proposal places DNS answers inside HTTP responses to reduce resolution latency. Early cross-working-group discussion examined wire formats and trust properties.

Windows drive-relative symlink bypasses tarfile data filter

A bug report against CPython showed that same-drive drive-relative symlinks on Windows are not caught by the tarfile data filter. The filter is meant to keep extracted paths inside intended containment boundaries. Maintainers of extraction code that runs on Windows need to treat the gap as a containment failure until fixed.