zmap / zcrypto

Liberal Go TLS + X.509 Library for Research
Other
134 stars 83 forks source link

Remove the message fragmentation mechanism in TLS 1.0 #381

Open szy1231 opened 6 months ago

szy1231 commented 6 months ago

In considering security, the Go official implementation includes a message fragmentation mechanism in the TLS 1.0 protocol. This design decision results in the inability to obtain complete information when exchanging NTLM information using the TLS 1.0 version. Given that the primary use of this library is for data collection, it is recommended to adjust the TLS 1.0 implementation to remove the fragmentation restriction.

Thank you for your assistance.