3 ms·
Maybe it's a bug in how curl checks certificates. So a victim behind a hostile AP might be redirected to a malicious site masquerading as a known legit site an
by Fatnino 3y ago
Maybe it's a bug in how curl checks certificates.
So a victim behind a hostile AP might be redirected to a malicious site masquerading as a known legit site and when the bad site presents a maliciously crafted bogus certificate curl doesn't notice.
- alkonaut 3y agoTrue, there are probably ways that could make this more severe if it's related to that kind of thing. And it would need to be on that level to come close to an attack of the kind that the log4j debacle was.