Do not bypass certificates validation

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Metadata

ID: csharp-security/check-server-ssl-sertificates

Language: C#

Severity: Error

Category: Security

CWE: 295

Description

Never bypass certificate validation. Certificates should be correctly checked to avoid attacks from untrusted sources.

Learn More

Non-Compliant Code Examples

using System.Net;
using System.Net.Http;

class MyClass {
public static void connect()
    {
        ServicePointManager.ServerCertificateValidationCallback +=
            (sender, certificate, chain, errors) => {
                return true;
            };

    }
}