What PowerDNS does is quite nice: if I understood correctly, it queries over dns (obviously) to find out if a patch is available, and exposes this information in the logs, status queries, metrics web UI, etc., and they triage into OK, patch available, and critical security patch. I don’t think they are doing the feature bitmap telemetry that Ondrej suggested, and you can implement what they do with or without including telemetry info in the query, so it is doable in a privacy-preserving way.
no subject
Date: 2018-10-18 23:48 (UTC)