OWASP/OWASP-WebScarab — pull request #5 by Lekensteyn (2013-02-13 23:31:14+00:00)
Title: Fixes: SSL issue date and avoid dropping unrecognized Authentication header

This pull contains two changes:

- Avoid clients rejecting the certificate because of desynchronized clocks. Even if the CA cert is valid, clients reject it because the certificate is issued one second in the future.
- Do not drop the Authorization header when it contains an unrecognized authorization scheme. This fixes sniffing an Android application that uses GoogleLogin.