[
https://issues.apache.org/jira/browse/TS-3746?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14632601#comment-14632601
]
ASF GitHub Bot commented on TS-3746:
------------------------------------
Github user jpeach commented on the pull request:
https://github.com/apache/trafficserver/pull/254#issuecomment-122596851
But what you are saying there is that the config *might* do what it says if
you have aligned the starts appropriately. I don't think that's good enough.
Configurations should work, all the time. Mostly working isn't a desirable
state of affairs. Implementing per-origin configuration as per-request and then
hoping for the best isn't a precedent that we should be setting.
> We need to make proxy.config.ssl.client.verify.server overridable
> -----------------------------------------------------------------
>
> Key: TS-3746
> URL: https://issues.apache.org/jira/browse/TS-3746
> Project: Traffic Server
> Issue Type: New Feature
> Components: Configuration
> Reporter: Syeda Persia Aziz
> Assignee: Dave Thompson
> Labels: Yahoo
> Fix For: sometime
>
>
> We need to make proxy.config.ssl.client.verify.server overridable. Some
> origin servers need validation to avoid MITM attacks while others don't.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
