You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Apr 1, 2024. It is now read-only.
PIP: This will require a PIP. It is a draft for now while I get tests passing.
Motivation
It is recommended to use hostname verification in most use cases for TLS. In order to have more secure defaults, I propose that we enable TLS hostname verification by default.
This change will not affect any users that do not have TLS enabled. It will only be a breaking change for users that want to use TLS with hostname verification disabled.
Modifications
Update all clients to enable hostname verification by default.
Verifying this change
This is a trivial change from a configuration perspective. I expect many tests will fail though, so those will also verify the changes.
Does this pull request potentially affect one of the following parts:
url: apache#20268
PIP: This will require a PIP. It is a draft for now while I get tests passing.
Motivation
It is recommended to use hostname verification in most use cases for TLS. In order to have more secure defaults, I propose that we enable TLS hostname verification by default.
This change will not affect any users that do not have TLS enabled. It will only be a breaking change for users that want to use TLS with hostname verification disabled.
Modifications
Verifying this change
This is a trivial change from a configuration perspective. I expect many tests will fail though, so those will also verify the changes.
Does this pull request potentially affect one of the following parts:
Documentation
doc-required
Matching PR in forked repository
PR in forked repository: michaeljmarshall#44
The text was updated successfully, but these errors were encountered: