Hi,

Whether curl does the ssl-pinning which can avoid "man in the middle
attack".
Does it do the strict validation. As explained in below link.
https://www.owasp.org/index.php/Pinning_Cheat_Sheet#OpenSSL

In servercert function does it do all the validations.
by setting CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER.

Thanks in advance.

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-07-24