16 lines
654 B
Plaintext
16 lines
654 B
Plaintext
=== deprecates: S3510
|
|
|
|
=== deprecates: S4499
|
|
|
|
=== deprecates: S5326
|
|
|
|
=== is related to: S4830
|
|
|
|
=== on 5 Nov 2020, 11:39:49 Pierre-Loup Tristant wrote:
|
|
{empty}.NET API offers https://docs.microsoft.com/en-us/dotnet/api/system.net.security.remotecertificatevalidationcallback[a single callback] to override TLS certificates chain and hostname validation. RSPEC-4830 already detects that this callback always accept the server certificate without validation. There is no easy way to detects code that validates the certificate chain and fails to validate the server hostname in this callback.
|
|
|
|
Therefore, this will not be implemented for .NET langauges.
|
|
|
|
|
|
|