http://d.puremagic.com/issues/show_bug.cgi?id=9355
Summary: [security] SSL certificate signature verification
disabled in std.net.curl
Product: D
Version: D2
Platform: All
OS/Version: All
Status: NEW
Severity: regression
Priority: P2
Component: Phobos
AssignedTo: [email protected]
ReportedBy: [email protected]
--- Comment #0 from David Nadlinger <[email protected]> 2013-01-19 12:02:41
PST ---
See the discussion in
https://github.com/D-Programming-Language/phobos/pull/1076.
The commit changes the HTTP-related functions in std.net.curl to no longer
verify the signature on the host certificate, rendering any D program using
them susceptible to man-in-the-middle attacks.
--
Configure issuemail: http://d.puremagic.com/issues/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
