Some years ago, there was a bug with host name checking in ssl so that connection to
www.paypal.com%00.thoughtcrime.orgwould look as
www.paypal.comat the certificate level.
The issue seems to be over for web browsers. But some tools and popular libraries still use
const char *without associated size internally for representing domain names.
www.paypal.com%00.thoughtcrime.orgseems to no longer be available, are there still some public server already set up servers for testing ?