Current setup: https://github.com/icsharpcode/ILSpy/blob/gh-pages/CNAME
Problem statement: index.md redirects to repository main page, only artifact used is updates.xml for the update check in ILSpy itself.
Given that we have an existing installed base that has ilspy.net in its code, we need to keep it up and running, leaving only two options:
- Remove CNAME and host updates.xml separately somewhere (would mean changing DNS entries)
- Keep the existing setup but incur one 301 for new ILSpy 10 until domain is sunset (and CNAME deleted)
One redirect was deemed less critical (because it will go away anyways) than modifying DNS entries that were unchanged for years.
We already have two more security relevant problems with updates.xml
- Absolute URL instead of relative to /releases
- updates.xml is not signed
Phase 1 completed via #3706. CNAME file to be removed in fall 2026 (yes, that means DNS resolve errors for old versions of ILSpy)
Edit: the domain will be kept so no malicious reuse can happen. Only the use of it will cease.
Current setup: https://github.com/icsharpcode/ILSpy/blob/gh-pages/CNAME
Problem statement: index.md redirects to repository main page, only artifact used is updates.xml for the update check in ILSpy itself.
Given that we have an existing installed base that has ilspy.net in its code, we need to keep it up and running, leaving only two options:
One redirect was deemed less critical (because it will go away anyways) than modifying DNS entries that were unchanged for years.
We already have two more security relevant problems with updates.xml
Phase 1 completed via #3706. CNAME file to be removed in fall 2026 (yes, that means DNS resolve errors for old versions of ILSpy)
Edit: the domain will be kept so no malicious reuse can happen. Only the use of it will cease.