From 9f1d548ce368763dcdda8cb392e2c2533dbd19e9 Mon Sep 17 00:00:00 2001 From: Fabian Keil Date: Wed, 22 Jul 2020 14:45:49 +0200 Subject: [PATCH] Improve the "ignore-certificate-errors" description --- doc/source/user-manual.sgml | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/doc/source/user-manual.sgml b/doc/source/user-manual.sgml index d59847ee..1c15cc5a 100644 --- a/doc/source/user-manual.sgml +++ b/doc/source/user-manual.sgml @@ -5268,11 +5268,14 @@ www.example.com certificate. - If the certificate is invalid the connection is aborted. + If the certificate can't be validated by &my-app; the connection is aborted. - This action disabled the certificate check allowing requests to sites - with invalid certificates. + This action disables the certificate check so requests to sites + with certificates that can't be validated are allowed. + + + Note that enabling this action allows Man-in-the-middle attacks. -- 2.39.2