Re:The most dangerous code in the world
by tptacek on Wednesday October 24, 2012 @08:49PM
(#4695816)
This is like saying any API is reasonable as long as it's documented. If you read the example, they found numerous examples of people who clearly weren't intending to disable SSL certificate validation who nonetheless overrode that default.
[ Parent
| on HN ]
Re:The most dangerous code in the world
by grannyg00se on Wednesday October 24, 2012 @10:56PM
(#4696151)
No, not any API. But if the defaults err on the side of caution, which is the case here, and the non-default documentation is complete and coherent, I think that's pretty good. I don't think I would call this situation unreasonable, though I do agree that it could be improved.