Skip to content

Commit

Permalink
client: allow version downgrade
Browse files Browse the repository at this point in the history
Active man-in-the-middle software can downgrade the protocol version.
Since the actual version is recorded (as well as the transmitted
packets), let's just allow a version downgrade such that it can be
detected.
  • Loading branch information
Lekensteyn committed Dec 28, 2017
1 parent 7a2701d commit 9ab88b8
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion main.go
Original file line number Diff line number Diff line change
Expand Up @@ -188,7 +188,6 @@ func tryTLS(domain string, version uint16, result *clientResult) (string, error)
tls_config := &tls.Config{
ServerName: domain,
KeyLogWriter: keylog,
MinVersion: version,
MaxVersion: version,
}
var rootCAs *x509.CertPool
Expand Down

0 comments on commit 9ab88b8

Please sign in to comment.