Re: Possible change to packet-ssl.c?

[Peter Wu <lekensteyn () gmail com>]

On Wednesday 09 April 2014 16:49:43 Guy Harris wrote:
> Why is that treated as a "this is encrypted" indication rather than a
> "somebody's trying to extract whatever's in the server's memory after the
> request payload" indication?

After the handshake, the record layer is encrypted, including heartbeats.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe