spdycat doesn't validate server certificates
acdha opened this issue · 1 comments
acdha commented
While testing a new webserver, I happened to run spdycat v1.3.2 against a server which has a valid SSL certificate but not for the hostname in question. Everything worked without any indication that it should not have.
tatsuhiro-t commented
spdycat is designed as debugging tool for SPDY protocol application, and no much work has been done for certificate verification so far.