search

aeris / cryptcheck

Verify some SSL/TLS website or XMPP implementation
GNU Affero General Public License v3.0
185 stars 20 forks source link

cryptcheck should not be able to test local IPs #11

Open emillon opened 9 years ago

emillon commented 9 years ago

https://tls.imirhil.fr/https/127.0.0.1

https://tls.imirhil.fr/https/10.0.0.1

This can leak some potentially sensitive information, as happened with Pocket a few weeks ago. You can find some solutions in the associated HN thread.

Thanks for this great tool!