Skip to content

Commit

Permalink
Fix doc issues.
Browse files Browse the repository at this point in the history
  • Loading branch information
mikedarcy committed Feb 10, 2021
1 parent 4bac5e1 commit 0a27259
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion doc/config.md
Original file line number Diff line number Diff line change
Expand Up @@ -160,7 +160,7 @@ identical to the `http` fetch handler configuration, with the following exceptio
| --- | --- |
|`bypass_ssl_cert_verification`|Either the boolean value `true` or `false`, or an array of string values consisting of URL patterns to be used in a simple substring match against the target URLs found in a bag's `fetch.txt` file. For example, `"bypass_ssl_cert_verification": ["https://raw.githubusercontent.com/fair-research/bdbag/"]` will match a `fetch.txt` entry with a URL of "https://raw.githubusercontent.com/fair-research/bdbag/master/test/test-data/test-http/test-fetch-http.txt". Defaults to `false`.

######NOTE:
###### NOTE:
It is NOT RECOMMENDED setting `bypass_ssl_cert_verification: true` as it will bypass SSL certificate validation for
ALL HTTPS requests. This will accept any TLS certificate presented by a remote server and will ignore hostname mismatches
and/or expired certificates, which will make the application vulnerable to man-in-the-middle (MitM) attacks.
Expand Down

0 comments on commit 0a27259

Please sign in to comment.