eriwang915
an hour ago
Xray-core's pinnedPeerCertSha256 treated an inserted leaf as the pinned cert, and the fix commit never called it a vulnerability.
Xray-core concealed a certificate verification bypass vulnerability
53 pointsposted 8 hours ago
by timbill2 Comments
cryptolobster
an hour ago
The reaction to Xray-core is disappointing