News for hackers. Stuff that matters.

A comment on Wcurl Is Here. Parent comment

Re:Wcurl Is Here by perchlorate on Friday August 23, 2024 @06:46PM (#41333734)
Just don't do that. Some of us (hello) live in countries that perform or tried to perform HTTPS MITM on a massive scale, and only had to roll back because so much well behaving shit broke.

If software suddenly started accepting invalid certificates, they would have no incentive of rolling it back. HTTPS would make zero sense then.

[ Parent | on HN ]
Re:Wcurl Is Here by firesteelrain on Friday August 23, 2024 @07:17PM (#41333945)
curl does accept if you enable the option to do so. It is optional
[ Parent | on HN ]
Re:Wcurl Is Here by perchlorate on Saturday August 24, 2024 @05:43AM (#41336899)
This doesn't make it a good idea to break HTTPS by default. Defaults matter, if everything ignored HTTPS errors by default, I would be talking to you over a MITMed connection right now. Because so much software stopped working, they had to roll back that braindead idea in less than a day.
[ Parent | on HN ]