The Apple curl security incident 12604 (opens in new tab)

(daniel.haxx.se)

15 pointsar02y ago2 comments

2 comments

Well, I mean, come on that does make those corporate MITM tools work better, dontit? I haven't checked it, but there's a non-zero chance that curl.exe on win32 "helps" in the same way, assuming there's an equivalent libressl in WSL

gecko2y ago

I'm not sure you understand how WSL works: it's just the native `curl` binary for whatever Linux distro you're using in WSL. On both Ubuntu and OpenSuSE, which are the two I have installed, --cacerts works as expected, because of course it does.

Separately, Microsoft bundles curl.exe as part of Windows since somewhere in the later Windows 10 or early Windows 11 releases, I forget which. This also appears to be honoring --cacerts.

So no, this seems to very much be an Apple problem.

j / k navigate · click thread line to collapse

2 comments

mdaniel2y ago

gecko2y ago

Separately, Microsoft bundles curl.exe as part of Windows since somewhere in the later Windows 10 or early Windows 11 releases, I forget which. This also appears to be honoring --cacerts.

So no, this seems to very much be an Apple problem.

j / k navigate · click thread line to collapse