Details in IRC, but long story short is libnginx-mod-http-geoip2 is NOT part of the nginx core code that is shipped from upstream (whereas libnginx-mod-http-geoip *is* built from upstream code and they have no intention to update it to geoip2 at the moment), and as such the libnginx-mod-http2-geoip2 code needs a Security Team review for MIR inclusion.
NACK on nginx until Security Team reviews.
Details in IRC, but long story short is libnginx- mod-http- geoip2 is NOT part of the nginx core code that is shipped from upstream (whereas libnginx- mod-http- geoip *is* built from upstream code and they have no intention to update it to geoip2 at the moment), and as such the libnginx- mod-http2- geoip2 code needs a Security Team review for MIR inclusion.