General Tech

Go will reject certificate chains containing eight distrusted SPKIs

Go will reject certificate chains containing eight distrusted SPKIs because the Go team has decided to remove the 'InsecureSkipVerify' option from the TLS configuration. This change will make the Go programming language more secure by preventing potential security vulnerabilities related to certificate validation. The 'InsecureSkipVerify' option allowed developers to bypass certificate verification, but this feature is being removed in favor of a more secure default behavior.

Read the full article at github.com →