kerryjiang / WebSocket4Net

A popular .NET WebSocket Client
752 stars 272 forks source link

WebSocket.NoSilverlight.cs v0.15 forces usage of insecure SslProtocols.Default #185

Open maxmeffert opened 3 years ago

maxmeffert commented 3 years ago

Hi, we just found that in v0.15 WebSocket.NoSilverlight.cs forces the usage of SslProtocols.Default for non .NET Core applications, limiting the operating system to choose between SSL3 und TLS1.0 which poses a potential security risk.

The recommendation is to use SslProtocols.None leaving the choice completely to the operating system.

kerryjiang commented 2 weeks ago

Please try WebSocket4Net 1.0.0-beta.2. https://www.nuget.org/packages/WebSocket4Net/1.0.0-beta.2