Ok, what I meant is I will be removing the SSL record along with the app
data!!
So this should be fine right? 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Richard Salz
Sent: Friday, July 21, 2006 5:28 PM
To: openssl-users@openssl.org
Subject: RE: Query On SSL Processing

The SSL records include a message digest (MAC) of the application data
within the record.  If you remove the application data, the SSL record is no
longer valid.

If you think about it, this is obvious.  SSL guarantees the integrity of the
application data.  If someone modifies or removes the application data, then
the SSL layer should, of course, notice this.

        /r$

--
SOA Appliances
Application Integration Middleware

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to