Bug in Lynx's SSL certificate validation – leaks password in clear text via SNI
> I ALWAYS SAID SNI IS A SHIT THING ONLY USED AS BAD EXCUSE FOR NAT [...]
>  I FEEL SO VINDICATED RIGHT NOW!Thorsten Glaser appears to be another from the BSD school of "perfect" programmers who are held back by the inadequacies of literally everybody and everything else in the world. If only the TLS protocol was designed by Thorsten, and everybody else used it the way Thorsten thinks they should, then this program would be correct so it's not really his fault, it's our fault. See?> Nah, SNI is a rather recent thing. But…This "rather recent thing" was standardised in 2003 and thus is old enough that if it were human it could vote in a lot of the world.  But it's true that in some versions of Lynx it wasn't available until July 2018. They only had three years to identify this gross parsing bug.