Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #22715

Re: Adding hostname verification to SSLSocket

Show all headers | View raw

On Sat, 02 Mar 2013 13:02:51 -0600, Ian Pilcher <arequipeno@gmail.com>
wrote, quoted or indirectly quoted someone who said :

> I would like to ensure
>that all of its connections enforce hostname verification, which the
>default SSLSocket implementation does not do.
 

Are you sure about that?  IIRC I had the opposite problem link
checking with links with a mismatch considered bad.  Mis-matches are
extremely common, particularly for large companies with many servers.
-- 
Roedy Green Canadian Mind Products http://mindprod.com
One thing I love about having a website, is that when I complain about
something, I only have to do it once. It saves me endless hours of 
grumbling.

Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Adding hostname verification to SSLSocket Ian Pilcher <arequipeno@gmail.com> - 2013-03-02 13:02 -0600
  Re: Adding hostname verification to SSLSocket Roedy Green <see_website@mindprod.com.invalid> - 2013-03-04 12:38 -0800
  Re: Adding hostname verification to SSLSocket Arne Vajhøj <arne@vajhoej.dk> - 2013-03-06 21:46 -0500

csiph-web