Why are people using curl --insecure? Why does this option even exist?
-
-
-
Replying to @cryptodavidw @lyon01_david
Testing what? That they can uninstall the CA certs bundle from their system and still download files?
1 reply 0 retweets 0 likes -
-
Replying to @cryptodavidw @jedisct1
Curl is just useful for many usecases, not just for downloading
1 reply 0 retweets 0 likes -
Replying to @cryptodavidw @jedisct1
Other example: testing a mobile app with cert pinning. If I want to curl things I need this
2 replies 0 retweets 0 likes
Replying to @cryptodavidw @lyon01_david
So these people use that Heroku script to test a mobile app with cert pinning? https://github.com/timsatterfield/heroku-buildpack-libsodium/blob/d176642575c51abc36e5ddb2ac2e6b08df6f2131/bin/compile#L46 … https://github.com/envato/heroku-buildpack-libsodium/network …
1:52 AM - 20 Aug 2017
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.