cache: use letsencrypt cert

davisjam / vuln-regex-detector

Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.

MIT License

320 stars 29 forks source link

cache: use letsencrypt cert #22

Closed davisjam closed 6 years ago

davisjam commented 6 years ago

Problem: I was using a self-signed certificate. These are vulnerable to MITM attacks.

Solution: I got a certificate through letsencrypt. Thanks EFF! I made various tweaks to client and server code to support a "real" SSL certificate rather than the self-signed one I had been using.

Issue: This fixes #17.