2 ms·

It says that API requests using TLS are not vulnerable. However, many applications won't do the appropriate certificate checking. If HTTP_PROXY is set to a mitm

by vbernat 10y ago

It says that API requests using TLS are not vulnerable. However, many applications won't do the appropriate certificate checking. If HTTP_PROXY is set to a mitm proxy, it can succeed.

kpcyrd 10y ago
The reason why they aren't affected is that you need to set HTTPS_PROXY for https:// https://
- lucb1e 10y ago
  I could imagine not all applications doing that, though.