Skip to content

[Website]: Insecurely Documents the use of curl -k which disables SSL/TLS verification #5776

@JLLeitschuh

Description

@JLLeitschuh

Type of issue

I can't find what I'm looking for

What documentation page is affected

https://www.elastic.co/docs/docs/reference/cloud/cloud-enterprise/ece-api-command-line

What happened?

The use of curl -k disables the SSL/TLS certificate verification within curl.

https://daniel.haxx.se/blog/2020/01/27/curl-ootw-k-insecure/

Impact

End users following this documentation will disable their HTTPS certificate checking allowing a MITM to steal credentials without the connection failing.

Additional info

No response

Metadata

Metadata

Assignees

Labels

Team:AdminIssues owned by the Admin Docs Teamcommunitysource:webIssues originating from the elastic.co docs

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions