[mdaniel]

I don't know if it's a standard but I believe a lot of tls libraries honor the SSLKEYLOGFILE env-var https://wiki.wireshark.org/TLS#:~:text=and%20curl%20when-,th...

[2030ai]

That seems like an unnecessary vulnerability waiting to happen.

[wruza]

Can’t wait till they patch it away and we lose the ability to investigate our own https traffic.

[frogsRnice]

At some point someone needs to take responsibility for allowing modification of environment variables via something dumb like http. Debugging interfaces are fine- we should expect more from developers.