api-client-php icon indicating copy to clipboard operation
api-client-php copied to clipboard

Enable Certificate Verification

Open moebrowne opened this issue 6 years ago • 0 comments

Peer verification should ALWAYS be enabled. Disabling it prevents authenticity checks and allows anyone with a certificate to impersonate livechat in a man in the middle attack.

  • https://secure.php.net/manual/en/function.curl-setopt.php#110457
  • https://stackoverflow.com/questions/21195530/does-turning-off-curlopt-ssl-verifypeer-in-curl-make-transmission-insecure
  • https://stackoverflow.com/questions/4660610/if-curlopt-ssl-verifypeer-is-false-is-the-data-transfer-no-longer-secure
  • https://snippets.webaware.com.au/howto/stop-turning-off-curlopt_ssl_verifypeer-and-fix-your-php-config/

moebrowne avatar Mar 24 '18 17:03 moebrowne