Quoth Jakukyo Friel: 
> Just tried with the latest commit (b4ca032),
> surf does not warn about invalid SSL certs.

It totally does. Visit https://njw.me.uk and see the "U" in the SSL 
section of the status bar, and compare to the "T" for 
https://njw.name.

> Change `static char *strictssl` to true and rebuild,
> still no effects.

Also not true; I get a SSL handshake error if strictssl is true.

You just reminded me an old patch I made for surf that gave more 
information on SSL failures was never merged - I'll ping it through 
again shortly.

Attachment: signature.asc
Description: Digital signature

Reply via email to