diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2007-10-03 08:00:42 +0000 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2007-10-03 08:00:42 +0000 |
| commit | 51c6a5d43b09835289a469165aa7a2bfb79dbdc6 (patch) | |
| tree | 49b4c738d465d09c72fd048bb77b91514058b40c /CHANGES | |
| parent | 15b8da1980538f5c56115777610867230b0ac9d1 (diff) | |
| download | curl-51c6a5d43b09835289a469165aa7a2bfb79dbdc6.tar.gz | |
Based on a patch brought by Johnny Luong, libcurl now offers
CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 and the curl tool --hostpubmd5. They both make
the SCP or SFTP connection verify the remote host's md5 checksum of the public
key before doing a connect, to reduce the risk of a man-in-the-middle attack.
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -6,6 +6,13 @@ Changelog +Daniel S (3 October 2007) +- Based on a patch brought by Johnny Luong, libcurl now offers + CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 and the curl tool --hostpubmd5. They both + make the SCP or SFTP connection verify the remote host's md5 checksum of the + public key before doing a connect, to reduce the risk of a man-in-the-middle + attack. + Daniel S (2 October 2007) - libcurl now handles chunked-encoded CONNECT responses |