| Subject: SslStream shutdown issue |
| Group: microsoft.public.windows.developer.winfx.sdk |
| Date: 11/29/2006 8:38:00 AM |
| From: =?Utf-8?B?Y29kZW11dHQ=?= [Email Address Protection] |
I wrote a small test app using SslStream. When you close an SslStream it does not notify the peer first with a close_notify. Is there some way to force SslStream to send a close_notify before closing the stream? If not, then that means SslStream is vulnerable to a so-called truncation attack. Will a future version of the FCL fix this? |
| Back |