News for hackers. Stuff that matters.

A comment on Bug in Lynx's SSL certificate validation – leaks password in clear text via SNI. Parent comment

Re:Bug in Lynx's SSL certificate validation – leaks password... by tinus_hn on Saturday August 07, 2021 @12:47PM (#28099952)
Http basic authentication urls are never secure (that requires https) and are not supported in links by browsers these days.
[ Parent | on HN ]
Re:Bug in Lynx's SSL certificate validation – leaks password... by akerl_ on Saturday August 07, 2021 @01:03PM (#28100089)
This bug only affects HTTPS basic auth, given that the issue is with SNI (and, of course, that basic auth over HTTP doesn’t have any encryption to leak around).
[ Parent | on HN ]