On: Show HN: Check if your browser is vulnerable to th...

[Jayschwa]

For HTTPS clients that don't execute Javascript (e.g. curl), GET https://gotofail.com:1266/

[kylec → Jayschwa]

You'll need to request the image directly:

    curl "https://gotofail.com:1266/test.png"

curl on OS X 10.9.1 fetches the image without complaint, while curl on Debian is correctly reporting an RSA padding check error.