Reputation: 2045
When a client connects to a node.js SSL server and is not authenticated, i.e.:
requestCert: false
secureConnection
event is fired on the SSL server but Cleartextstream.authorized
is false
Is the communication between the client and the server still encrypted (authentication and confidentiality being two different things)?
Another way to put it: does node.js SSL server falls back as a normal/unencrypted TCP server if there are authentication problems, but still fires a secureConnection
event?
Upvotes: 0
Views: 221
Reputation: 12265
Communication between the client and the server is always encrypted if you're using SSL server. So if somebody captures your traffic, he won't be able to read it (but you make MitM attack easier).
But why do you asking it here, if you can simply check the traffic using Wireshark?
Upvotes: 1