Re: [FFmpeg-devel] [PATCH 1/3] avformat/tls_openssl: add host verification

From: Nicolas George <george@nsup.org>
To: FFmpeg development discussions and patches <ffmpeg-devel@ffmpeg.org>
Subject: Re: [FFmpeg-devel] [PATCH 1/3] avformat/tls_openssl: add host verification
Date: Tue, 8 Jul 2025 20:21:04 +0200
Message-ID: <aG1hkM7KKpjkPHzz@phare.normalesup.org> (raw)
In-Reply-To: <E5B3FC2D-B682-4C44-90B6-0E5B5607134C@gmail.com>

Marvin Scholz (HE12025-07-08):
> Can you clarify?

wget(1):

       --no-check-certificate
           Don't check the server certificate against the available certificate
           authorities.  Also don't require the URL  host  name  to  match  the
           common name presented by the certificate.

curl(1):
       -k, --insecure
              (TLS SFTP SCP) By default, every secure connection curl makes  is
              verified  to  be secure before the transfer takes place. This op‐
              tion makes curl skip the verification step  and  proceed  without
              checking.

w3m/README:
   ssl_verify_server ON/OFF
       Verify the SSL server (default: ON)

And so on.

Should probably be off by default for now, too.

Regards,

-- 
  Nicolas George
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".