On: Vaultwarden commit introduces SSO using OpenID Connect

[caymanjim]

Why do you think that DNS is required? Anything malicious could (and likely should) hard-code an IP.

[crimsonnoodle58 → caymanjim]

You ensure DNS is disabled to stop DNS exfil. You can google it, but basically they exfil data by looking up encoded subdomains.

Hardcoding an IP won't help if the network policy disallows all network access.