[PATCH] wget: don't silently ignore certificate validation
Denys Vlasenko
vda.linux at googlemail.com
Fri May 25 12:19:18 UTC 2018
On Thu, May 24, 2018 at 6:50 PM, Jakub Jirutka <jakub at jirutka.cz> wrote:
> Internal TLS code (FEATURE_WGET_HTTPS) does not implement validation
> of the server's certificate. It is documented in the code, but not
> even mentioned in the --help message, so users typically don't know
> about this behaviour.
> That's a crime against security!
Say what?
More information about the busybox
mailing list