Comment 8 for bug 1313108

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

Benjamin,

I don't think you quite understand what I'm saying. If the code worked with https://reddit.com and an invalid certificate, it means it's not properly doing certificate validation. Just changing the URL to https://ssl.reddit.com isn't enough to prevent a MITM, the certificate validation needs to be fixed also.