Open
Description
In the current state, ldaptor does not provide any way to perform certificate validation: https://github.com/twisted/ldaptor/blame/60f00e716790397a1196db30186b0d111edb45a3/ldaptor/protocols/ldap/ldapclient.py#L261
This open todo exposes ldaptor to man-in-the-middle attacks.
Metadata
Metadata
Assignees
Labels
No labels