Comment 0 for bug 1071079

Revision history for this message
Benjamin Kerensa (bkerensa) wrote :

What happened: SERVER = "http://videosearch.ubuntu.com/v0" string in unity-scope-video-remote does not use SSL.

What was expected: SERVER = "https://videosearch.ubuntu.com/v0" was the actual string and SSL was configured on the videosearch.ubuntu.com server.

Without SSL this scope would allow users queries to be intercepted and have malicious results returned if MitM took place.