[wp-trac] [WordPress Trac] #25007: WP_HTTP_Fsockopen does not verify SSL certificates

[WordPress Trac]

#25007: WP_HTTP_Fsockopen does not verify SSL certificates
--------------------------+------------------
 Reporter:  rmccue        |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.7
Component:  HTTP          |     Version:
 Severity:  major         |  Resolution:
 Keywords:                |
--------------------------+------------------

Comment (by rmccue):

 Worth pointing out that using the HTTP stream is dangerous, since in some
 environments the broken cURL Streams will take over. Usually, we'd be able
 to use cURL in those places, but not always. IMO, it should be removed.

 (Requests' transport is now closer to streams, but uses a TCP stream
 rather than a higher level HTTP stream, so it's safe from that.)

 Also, I've been working on [https://github.com/rmccue/Requests/pull/63
 full common name validation], which will land in 1.6 pending review. This
 is an arguably more important feature than the above patch.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25007#comment:3>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software