|
|
@@ -95,9 +95,10 @@ namespace MAX
|
|
95
|
95
|
// WARNING:
|
|
96
|
96
|
//
|
|
97
|
97
|
// The protocol does not do any form of server authentication so this step is
|
|
98
|
|
- // trivially vulnerable to a man-in-the-middle attack where an intermediary
|
|
99
|
|
- // intercepts this request and sends their own RSA key while keeping the server RSA
|
|
100
|
|
- // key to themselves.
|
|
|
98
|
+ // vulnerable to a man-in-the-middle attack where an intermediary intercepts this
|
|
|
99
|
+ // request and sends their own RSA key while keeping the server RSA key to themselves.
|
|
|
100
|
+ // This is not really an issue here as this is server to server communication and
|
|
|
101
|
+ // therefore less likely to be intercepted.
|
|
101
|
102
|
await WriteMessageAsync(new MessageBuilder().Append("PK")).ConfigureAwait(false);
|
|
102
|
103
|
response = await ReadMessageAsync().ConfigureAwait(false);
|
|
103
|
104
|
|