On Wednesday 09 April 2014 16:49:43 Guy Harris wrote: > Why is that treated as a "this is encrypted" indication rather than a > "somebody's trying to extract whatever's in the server's memory after the > request payload" indication?
After the handshake, the record layer is encrypted, including heartbeats. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe