hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Oleg Kalnichevski <ol...@apache.org>
Subject CVE-2014-3577 postmortem
Date Thu, 21 Aug 2014 13:26:41 GMT
Dirk-Willem et al

I have pretty much completely rewritten every bit of code related to
hostname verification in SVN trunk. 

https://github.com/apache/httpclient/tree/268d6cc113b305addc4a31a70bd7c3b6d545e337/httpclient/src/main/java/org/apache/http/conn/ssl

I would truly appreciate someone doing a peer review of the changes
and / or giving me feedback with regards to further improvements.

Cheers

Oleg



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org


Mime
View raw message