• henfredemars
    link
    fedilink
    arrow-up
    20
    ·
    2 years ago

    Our SSL implementation never checks the certificates, largely defeating the purpose of SSL.

    • vrighter@discuss.tchncs.de
      link
      fedilink
      arrow-up
      4
      ·
      2 years ago

      same at my old workplace. First line that executes in Main was to disable certificate validation on everything. But we could say we updated everything to the newest version of tls