BSecureSocket: Don't continue with an untrusted certificate by default.
It has been multiple years since this comment was written; all relevant apps have added their own hooks around this, so we should now be "secure by default." Also spotted by a random Hacker News commenter.
This commit is contained in:
@@ -532,10 +532,7 @@ BSecureSocket::InitCheck()
|
||||
bool
|
||||
BSecureSocket::CertificateVerificationFailed(BCertificate&, const char*)
|
||||
{
|
||||
// Until apps actually make use of the certificate API, let's keep the old
|
||||
// behavior and accept all connections, even if the certificate validation
|
||||
// didn't work.
|
||||
return true;
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user