On Thu, 25 Oct 2012, Yehezkel Horowitz wrote:
As to what we can do to make cURL even better (in order to protect
unprofessional users that don't know what they are doing), We could make '1'
to act as '2' (verify peer identity), and add a special magic value (i.e.
27934) that will act as todays '1' (check for CN existence but don't verify
it).
I think most of users do not intend to use '1' in the unsecure way, so most
of them will be happy with this change of behavior.
Yes, I agree with this and I believe it could be an acceptable way forward. I
don't think 1 is used on purpose very much so it wouldn't hurt a lot.
--
/ daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
