BSecureSocket: Don't continue with an untrusted certificate by default.

It has been multiple years since this comment was written; all relevant
apps have added their own hooks around this, so we should now be
"secure by default."

Also spotted by a random Hacker News commenter.
This commit is contained in:
Augustin Cavalier
2019-08-23 17:56:09 -04:00
parent 8d63a9060e
commit a830ec9a1c
+1 -4
View File
@@ -532,10 +532,7 @@ BSecureSocket::InitCheck()
bool
BSecureSocket::CertificateVerificationFailed(BCertificate&, const char*)
{
// Until apps actually make use of the certificate API, let's keep the old
// behavior and accept all connections, even if the certificate validation
// didn't work.
return true;
return false;
}