浏览代码

Fix comment.

Andrew Klopper 8 年之前
父节点
当前提交
6474cbb31c
共有 1 个文件被更改,包括 4 次插入3 次删除
  1. 4 3
      MAXClient/Client.cs

+ 4 - 3
MAXClient/Client.cs

@@ -95,9 +95,10 @@ namespace MAX
95 95
             // WARNING:
96 96
             //
97 97
             // The protocol does not do any form of server authentication so this step is
98
-            // trivially vulnerable to a man-in-the-middle attack where an intermediary 
99
-            // intercepts this request and sends their own RSA key while keeping the server RSA
100
-            // key to themselves.
98
+            // vulnerable to a man-in-the-middle attack where an intermediary intercepts this
99
+            // request and sends their own RSA key while keeping the server RSA key to themselves.
100
+            // This is not really an issue here as this is server to server communication and
101
+            // therefore less likely to be intercepted. 
101 102
             await WriteMessageAsync(new MessageBuilder().Append("PK")).ConfigureAwait(false);
102 103
             response = await ReadMessageAsync().ConfigureAwait(false);
103 104