Skip to content
This repository was archived by the owner on Jan 21, 2023. It is now read-only.

Switch to reqwest and accept any hostname for certificates #2

Merged
merged 2 commits into from
Jun 29, 2021

Conversation

AlyoshaVasilieva
Copy link
Owner

Fixes #1.

Makes it trivially easy to MITM the function, but it was specifically designed not to need any of your Twitch account's data so the worst thing that can happen is watching a different stream.

Now that it has a resolver override option it's usable.

Plus some minor changes, squashed into this commit.
Twitch changed the TLS certificate's alt names, breaking the evasion I was using for the GFW. Fix by accepting any names on the certificate.

Dangerous in the general case, but here the worst thing CNGov can do is make you watch a different video, which was already possible if they hijacked your function.
@AlyoshaVasilieva AlyoshaVasilieva merged commit 62d8888 into main Jun 29, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Unreliable GFW evasion
1 participant