Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules

[Christian Heinrich <christian.heinrich () cmlh id au>]

Stig,

On Wed, 19 Apr 2023 at 01:24, Stig Palmquist <stig () stig io> wrote:
> ... and more. We have generated a list of over 300 potentially affected
> CPAN distributions.

The responsibility for this fix is therefore with the maintainers of
the CPAN modules who accepted the residual risk as documented at
https://metacpan.org/pod/HTTP::Tiny#SSL-SUPPORT rather than HTTP:Tiny
itself.


-- 
Regards,
Christian Heinrich

http://cmlh.id.au/contact