[PATCH] wget: don't silently ignore certificate validation

Denys Vlasenko vda.linux at googlemail.com
Fri May 25 12:19:18 UTC 2018


On Thu, May 24, 2018 at 6:50 PM, Jakub Jirutka <jakub at jirutka.cz> wrote:
> Internal TLS code (FEATURE_WGET_HTTPS) does not implement validation
> of the server's certificate.  It is documented in the code, but not
> even mentioned in the --help message, so users typically don't know
> about this behaviour.


> That's a crime against security!

Say what?


More information about the busybox mailing list