57 matches found
curl: Missing applicability validation allows non-applicable HTTPS RR to reach ECH processing
Summary The HTTPS RR applicability check Curlhttpsrrapplicable is applied before ALPN selection, but the same check is not applied consistently in the ECH initialization paths. When an HTTPS RR is not applicable to the active connection, curl correctly reports it as not applicable and avoids usin...
5.5AI score
SaveExploits0
20