WebSocket4Net
WebSocket4Net copied to clipboard
WebSocket.NoSilverlight.cs v0.15 forces usage of insecure SslProtocols.Default
Hi, we just found that in v0.15 WebSocket.NoSilverlight.cs forces the usage of SslProtocols.Default for non .NET Core applications, limiting the operating system to choose between SSL3 und TLS1.0 which poses a potential security risk.
The recommendation is to use SslProtocols.None leaving the choice completely to the operating system.
- https://docs.microsoft.com/en-us/dotnet/framework/network-programming/tls
- https://docs.microsoft.com/en-us/dotnet/api/system.security.authentication.sslprotocols?view=net-5.0
Please try WebSocket4Net 1.0.0-beta.2. https://www.nuget.org/packages/WebSocket4Net/1.0.0-beta.2