Skip to content

fix(security): enable certificate validation by default - #872

Open
zeldrisho wants to merge 1 commit into
bbepis:masterfrom
zeldrisho:security/disable-certificate-validation-pr
Open

zeldrisho wants to merge 1 commit into
bbepis:masterfrom
zeldrisho:security/disable-certificate-validation-pr

Conversation

@zeldrisho

Copy link
Copy Markdown
Contributor

The default HTTP configuration now preserves TLS certificate validation instead of disabling it for new installations. The explicit DisableCertificateValidation=True setting remains available for compatibility when a user knowingly opts in.

The legacy host callback now accepts a certificate only when .NET reports SslPolicyErrors.None, avoiding unconditional acceptance while preserving the existing endpoint registration API. This protects translation traffic and configured API credentials from straightforward certificate interception without changing the selected translation providers or endpoints.

@zeldrisho
zeldrisho marked this pull request as ready for review September 21, 2026 05:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant