{"action":"created","issue":{"url":"https://api.github.com/repos/servo/servo/issues/4954","labels_url":"https://api.github.com/repos/servo/servo/issues/4954/labels{/name}","comments_url":"https://api.github.com/repos/servo/servo/issues/4954/comments","events_url":"https://api.github.com/repos/servo/servo/issues/4954/events","html_url":"https://github.com/servo/servo/issues/4954","id":58098360,"number":4954,"title":"Verify hostnames in SSL certificates","user":{"login":"mbrubeck","id":5920,"avatar_url":"https://avatars.githubusercontent.com/u/5920?v=3","gravatar_id":"","url":"https://api.github.com/users/mbrubeck","html_url":"https://github.com/mbrubeck","followers_url":"https://api.github.com/users/mbrubeck/followers","following_url":"https://api.github.com/users/mbrubeck/following{/other_user}","gists_url":"https://api.github.com/users/mbrubeck/gists{/gist_id}","starred_url":"https://api.github.com/users/mbrubeck/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mbrubeck/subscriptions","organizations_url":"https://api.github.com/users/mbrubeck/orgs","repos_url":"https://api.github.com/users/mbrubeck/repos","events_url":"https://api.github.com/users/mbrubeck/events{/privacy}","received_events_url":"https://api.github.com/users/mbrubeck/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/servo/servo/labels/A-network","name":"A-network","color":"d7e102"},{"url":"https://api.github.com/repos/servo/servo/labels/I-wrong","name":"I-wrong","color":"e10c02"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2015-02-18T17:20:43Z","updated_at":"2015-04-26T19:06:23Z","closed_at":null,"body":"When visiting a site whose certificate is invalid because of a hostname mismatch (such as https://en.irfanview-forum.de/), Servo does not display any error.\r\n\r\nOpenSSL does not automatically verify that the hostname in the URL matches the subject name or SAN (subject alternate name) in the certificate.  The application must do this.  It might make sense to put some of this functionality into Hyper.\r\n\r\nDocumentation:\r\n\r\n* http://wiki.openssl.org/index.php/Hostname_validation\r\n* https://crypto.stanford.edu/~dabo/pubs/abstracts/ssl-client-bugs.html"},"comment":{"url":"https://api.github.com/repos/servo/servo/issues/comments/96421294","html_url":"https://github.com/servo/servo/issues/4954#issuecomment-96421294","issue_url":"https://api.github.com/repos/servo/servo/issues/4954","id":96421294,"user":{"login":"tarcieri","id":797,"avatar_url":"https://avatars.githubusercontent.com/u/797?v=3","gravatar_id":"","url":"https://api.github.com/users/tarcieri","html_url":"https://github.com/tarcieri","followers_url":"https://api.github.com/users/tarcieri/followers","following_url":"https://api.github.com/users/tarcieri/following{/other_user}","gists_url":"https://api.github.com/users/tarcieri/gists{/gist_id}","starred_url":"https://api.github.com/users/tarcieri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tarcieri/subscriptions","organizations_url":"https://api.github.com/users/tarcieri/orgs","repos_url":"https://api.github.com/users/tarcieri/repos","events_url":"https://api.github.com/users/tarcieri/events{/privacy}","received_events_url":"https://api.github.com/users/tarcieri/received_events","type":"User","site_admin":false},"created_at":"2015-04-26T19:06:23Z","updated_at":"2015-04-26T19:06:23Z","body":"Yep, that's exactly what my library vaporware library would allow you to do :wink:"}}