.net - 是否有 TLS 1.2 的 .NET 实现？

Question

由于我刚刚发现 RFC 5425 需要使用 TLS 1.2，而 .NET 尚不支持它，我想知道是否有任何 TLS 1.2 协议(protocol)的实现，可能是开源的，如 RFC 5246 中所定义.

Answer 1

是的，尽管您必须在 System.Net.ServicePointManager.SecurityProtocol 手动开启 TLS 1.2

System.Net.ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12 | SecurityProtocolType.Tls11 | SecurityProtocolType.Tls; // comparable to modern browsers
var response = WebRequest.Create("https://www.howsmyssl.com/").GetResponse();
var body = new StreamReader(response.GetResponseStream()).ReadToEnd();

Your client is using TLS 1.2, the most modern version of the encryption protocol

---

开箱即用，WebRequest will use TLS 1.0 or SSL 3 .

Your client is using TLS 1.0, which is very old, possibly susceptible to the BEAST attack, and doesn't have the best cipher suites available on it. Additions like AES-GCM, and SHA256 to replace MD5-SHA-1 are unavailable to a TLS 1.0 client as well as many more modern cipher suites.