ehmicky
ehmicky

Reputation: 2045

node.js SSL encryption without authentication

When a client connects to a node.js SSL server and is not authenticated, i.e.:

Is the communication between the client and the server still encrypted (authentication and confidentiality being two different things)?

Another way to put it: does node.js SSL server falls back as a normal/unencrypted TCP server if there are authentication problems, but still fires a secureConnection event?

Upvotes: 0

Views: 221

Answers (1)

alex
alex

Reputation: 12265

Communication between the client and the server is always encrypted if you're using SSL server. So if somebody captures your traffic, he won't be able to read it (but you make MitM attack easier).

But why do you asking it here, if you can simply check the traffic using Wireshark?

Upvotes: 1

Related Questions