mirror of
https://github.com/httptoolkit/frida-interception-and-unpinning.git
synced 2026-09-22 09:02:19 +02:00
Tim Perry
de4493d1f7
We previously left this in, since it's generally better to follow TLS rules, but there's one case where it matters: when a client sends a request without using SNI, and so the proxy may not show the right certificate. We want to allow that, and to do so we need to ensure that hostname checks are skipped (but only for our CA - not for any others, which must still follow normal TLS rules).