-
Notifications
You must be signed in to change notification settings - Fork 37
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Where to reinstate SSL verification spec? #169
Comments
Before the reconnection ssl support is completed, can we let it throw an exception if users enable both reconnection and SSL? Current implementation may introduce a vulnerability as: step 1, the MITM forces the client to drop a connection. |
I have opened a PR with the fix. Please have a look. |
@anarthal pointed out that if you set your options on the |
in
example/cpp20_intro_tls.cpp
, it doesbefore
async_exec
.I wonder whether this survives auto-reconnect? If not, where should I reinstate these for new connections?
The text was updated successfully, but these errors were encountered: