[sword-devel] MiTM

[DM Smith]

I'll look into it. 


> On Sep 18, 2016, at 11:20 AM, Jaak Ristioja <jaak at ristioja.ee> wrote:
> 
> Hi!
> 
> In src/mgr/curlhttpt.cpp:
> 
>    /* Disable checking host certificate */
>    curl_easy_setopt(session, CURLOPT_SSL_VERIFYPEER, false);
> 
> Why? Afaik this allows the use of self-signed certificates for MiTM.
> 
> Best regards,
> J
> 
> _______________________________________________
> sword-devel mailing list: sword-devel at crosswire.org
> http://www.crosswire.org/mailman/listinfo/sword-devel
> Instructions to unsubscribe/change your settings at above page
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.crosswire.org/pipermail/sword-devel/attachments/20160918/29f9f6c7/attachment.html>