Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

SEC15-EX1: Because of the mechanisms that SSLSockets provide to ensure the secure transfer of packets, significant performance overhead may result. If no sensitive information is being transmitted, or the channel is not prone to attacks, regular Sockets are sufficient.

Risk

...

Assesment

Using plain sockets instead of SSLSockets means that the data's confidentiality and integrity is not guaranteed.

...