User: Password:
|
|
Subscribe / Log in / New account

Python, SSL/TLS certificates and default validation

Python, SSL/TLS certificates and default validation

Posted Jan 29, 2014 18:59 UTC (Wed) by jhoblitt (subscriber, #77733)
In reply to: Python, SSL/TLS certificates and default validation by dskoll
Parent article: Python, SSL/TLS certificates and default validation

Agreed -- there's signifigant reason to believe that any number of 'public' CAs are or can be suverted by sophisticated attackers. However, giving the option of CA signature validation does prevent trivial MITM attacks which does have merit.


(Log in to post comments)


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds