Skip to content

Commit

Permalink
Deprecate ntlm (#196)
Browse files Browse the repository at this point in the history
* Deprecate ntlm

* Update ntlm.ts
  • Loading branch information
Danny McCormick authored Feb 27, 2020
1 parent cbb3089 commit 7802a39
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions lib/handlers/ntlm.ts
Original file line number Diff line number Diff line change
@@ -1,6 +1,14 @@
// Copyright (c) Microsoft. All rights reserved.
// Licensed under the MIT license. See LICENSE file in the project root for full license information.

// This handler has been deprecated.
// Our recommendation is to use one of the other supported handlers due to security concerns around NTLM protocol.
// See these articles for more info:
// * https://securiteam.com/securityreviews/5op0b2kgac/
// * https://www.bleepingcomputer.com/news/security/new-microsoft-ntlm-flaws-may-allow-full-domain-compromise/
// * https://docs.microsoft.com/en-us/archive/blogs/miriamxyra/stop-using-lan-manager-and-ntlmv1 - this one is us (MS) telling people to stop using NTLMV1, and pointing to some issues surrounding V2 that have since been discovered to be worse than thought
// * https://www.helpnetsecurity.com/2019/10/10/ntlm-vulnerabilities/

import ifm = require('../Interfaces');
import http = require("http");
import https = require("https");
Expand Down

0 comments on commit 7802a39

Please sign in to comment.