Xray-core hid a certificate verification bypass for six months
A proxy tool used to bypass censorship shipped with TLS verification disabled by default, then buried the fix in unrelated commits.
Read the note 1 min read
From the notebook
tls.
1 note on this topic.