3 ms·
I don't know if it's a standard but I believe a lot of tls libraries honor the SSLKEYLOGFILE env-var https://wiki.wireshark.org/TLS#:~:text=and%20curl%20when-,t
by mdaniel 2y ago
I don't know if it's a standard but I believe a lot of tls libraries honor the SSLKEYLOGFILE env-var https://wiki.wireshark.org/TLS#:~:text=and%20curl%20when-,the%20sslkeylogfile%20environment%20variable,-is%20set.%20To https://wiki.wireshark.org/TLS#:~:text=and%20curl%20when-,th...
- 2030ai 2y agoThat seems like an unnecessary vulnerability waiting to happen.
- frogsRnice 2y agoAt some point someone needs to take responsibility for allowing modification of environment variables via something dumb like http. Debugging interfaces are fine- we should expect more from developers.
- wruza 2y agoCan’t wait till they patch it away and we lose the ability to investigate our own https traffic.