“A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits (１２７.0.0.1).”
Wait, you can do that?!
argv[-1]
npub1k6…mm3fx
2026-10-23 15:10:06 UTC
in reply to nevent1q…3jxf
Author Public Key
npub1k6ykawdchynr4qhzka4wk3qpj09g0p2kgcprd4y20mgrnlxxmucq5mm3fxPublished at
2026-10-23 15:10:06 UTCEvent JSON
{
"id": "8e475c504fed087f1ae2c29843fabffaccc5441bfe171a2a375f6273afa534f8",
"pubkey": "b6896eb9b8b9263a82e2b76aeb440193ca878556460236d48a7ed039fcc6df30",
"created_at": 1792768206,
"kind": 1,
"tags": [
[
"p",
"86b397086a130510861dd58f255fadeee1c47815185fa3bb628a06b4d6af31ac"
],
[
"e",
"8c23f5d422bdb46678eca61b6ec9589b1c2ea341b619d22e0580b30f35aa4bf0",
"",
"root",
"86b397086a130510861dd58f255fadeee1c47815185fa3bb628a06b4d6af31ac"
],
[
"proxy",
"https://mastodon.sdf.org/@argv_minus_one/117490857173880783",
"web"
],
[
"proxy",
"https://mastodon.sdf.org/users/argv_minus_one/statuses/117490857173880783",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.sdf.org/users/argv_minus_one/statuses/117490857173880783",
"pink.momostr"
],
[
"-"
]
],
"content": "“A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits (１２７.0.0.1).”\n\nWait, you can do that?!",
"sig": "9419311d8479d56a063677e010ea04746d2a664782f00426d3f21151605cac6f8e748449d508272854058d7c5a786a04cbc292f96b395c6b24d8d375b81b4e84"
}