Hacker News new | ask | show | jobs
by Severian 723 days ago
Yeah, not verifying server cert or OCSP/CRLs is a problem. DNS attacks can redirect and you'd be none the wiser.