How to Safely Use 'curl ignore ssl' for Testing Without Compromising Security?

16 Replies, 2268 Views

Hey, just wanted to chime in—curl ignore ssl is def risky, but sometimes unavoidable. I’d recommend using `--cacert` to point to a specific cert if you’re testing against a known endpoint.

Also, if you’re on Linux, you can use `strace` to monitor what curl is doing under the hood. Helps catch any weird behavior when bypassing SSL.

Messages In This Thread



Users browsing this thread: 1 Guest(s)