N
Hacker Next
new
past
show
ask
show
jobs
submit
login
▲
Xray-core concealed a certificate verification bypass vulnerability
(
github.com
)
62 points by
timbill
10 hours ago
|
2 comments
add comment
Rendered at 03:27:59 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
eriwang915 2 hours ago
[-]
Xray-core's pinnedPeerCertSha256 treated an inserted leaf as the pinned cert, and the fix commit never called it a vulnerability.
cryptolobster 3 hours ago
[-]
The reaction to Xray-core is disappointing