BSecureSocket: Don't continue with an untrusted certificate by default.
It has been multiple years since this comment was written; all relevant apps have added their own hooks around this, so we should now be "secure by default." Also spotted by a random Hacker News commenter.
This commit is contained in:
@@ -532,10 +532,7 @@ BSecureSocket::InitCheck()
|
|||||||
bool
|
bool
|
||||||
BSecureSocket::CertificateVerificationFailed(BCertificate&, const char*)
|
BSecureSocket::CertificateVerificationFailed(BCertificate&, const char*)
|
||||||
{
|
{
|
||||||
// Until apps actually make use of the certificate API, let's keep the old
|
return false;
|
||||||
// behavior and accept all connections, even if the certificate validation
|
|
||||||
// didn't work.
|
|
||||||
return true;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user