(please don't top-post) On Jul 24, 2013, at 11:20 PM, venkatesh perumalla <[email protected]> wrote:
> But the comments of the function "servercert", it looks like it handles the > "man in the middle attack". > Should we have to do anything extra for avoiding "man in the middle attack". The whole point of TLS/SSL pinning is to avoid a possible MitM attack caused by a signed and trusted but forged certificate that would normally pass an examination. If you're not sure what an MitM attack is, Wikipedia provides a pretty good explanation: <https://en.wikipedia.org/wiki/Man-in-the-middle_attack> Nick Zitzmann <http://www.chronosnet.com/> ------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html
