News for hackers. Stuff that matters.

A comment on Bug in Lynx's SSL certificate validation – leaks password in clear text via SNI. Parent comment

Re:Bug in Lynx's SSL certificate validation – leaks password... by Mister_Snuggles on Saturday August 07, 2021 @12:45PM (#28099941)
This bug seems to have nothing to do with SNI or TLS, it is all about how Lynx parses the URL and what pieces it incorrectly passes to the underlying TLS library.
[ Parent | on HN ]

There are no comments on this comment yet.