[Issue 9355] New: [security] SSL certificate signature verification disabled in std.net.curl

[d-bugmail at puremagic.com]

http://d.puremagic.com/issues/show_bug.cgi?id=9355

           Summary: [security] SSL certificate signature verification
                    disabled in std.net.curl
           Product: D
           Version: D2
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: regression
          Priority: P2
         Component: Phobos
        AssignedTo: nobody at puremagic.com
        ReportedBy: code at klickverbot.at


--- Comment #0 from David Nadlinger <code at klickverbot.at> 2013-01-19 12:02:41 PST ---
See the discussion in
https://github.com/D-Programming-Language/phobos/pull/1076.

The commit changes the HTTP-related functions in std.net.curl to no longer
verify the signature on the host certificate, rendering any D program using
them susceptible to man-in-the-middle attacks.

-- 
Configure issuemail: http://d.puremagic.com/issues/userprefs.cgi?tab=email
------- You are receiving this mail because: -------