Comment by mdaniel

19 days ago

I don't know if it's a standard but I believe a lot of tls libraries honor the SSLKEYLOGFILE env-var https://wiki.wireshark.org/TLS#:~:text=and%20curl%20when-,th...

3 comments

mdaniel

Reply
2030ai  19 days ago

That seems like an unnecessary vulnerability waiting to happen.

  • wruza  19 days ago

    Can’t wait till they patch it away and we lose the ability to investigate our own https traffic.

  • frogsRnice  19 days ago

    At some point someone needs to take responsibility for allowing modification of environment variables via something dumb like http. Debugging interfaces are fine- we should expect more from developers.