[gambit-list] No TLS certificate validation
Dimitris Vyzovitis
vyzo at hackzen.org
Wed Nov 15 04:17:21 EST 2017
Marc,
It seems that the TLS stack is completely lacking client-side server
certificate validation. There are now two open issues on github (#200
and #312 which I just opened).
This is a real security problem, as not having certificate validation
defeats the whole purpose of TLS.
Can we do something about it?
-- vyzo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.iro.umontreal.ca/pipermail/gambit-list/attachments/20171115/d1ed62d9/attachment.htm>
More information about the Gambit-list
mailing list