15 Nov
2017
15 Nov
'17
09:17
Marc, It seems that the TLS stack is completely lacking client-side server certificate validation. There are now two open issues on github (#200 and #312 which I just opened). This is a real security problem, as not having certificate validation defeats the whole purpose of TLS. Can we do something about it? -- vyzo