.NET 框架中的传输层安全
老板问了我一个问题，实际上我找不到任何连贯/全面的答案！
所以我求助于您，StackOverflow 中明智且无所不知的集体:)
今天的问题是“.NET 支持传输层安全版本 1.1 还是 1.2？”谷歌在这个问题上几乎毫无用处，并且那里的文档严重缺乏。
对此的任何帮助将不胜感激。
谢谢你， 克林特
I've been asked a question by the boss and actually I can't find any sort of coherent / comprehensive answer out there!
So I turn to you, the wise and all-knowing collective of StackOverflow :)
The question of the day is "Does .NET support transport layer security version 1.1 or 1.2?" Google is next to useless on this issue and the documentation out there is severely lacking.
Any help on this would be greatly appreciated.
Thank you,
Clint
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
Windows 7 中添加了 TLS 1.1 和 1.2 支持，我的理解是 .NET 依赖于 Windows 的 SChannel 来提供 TLS 支持。所以我认为你问题的答案是“取决于操作系统”。
现在您应该记住，大多数站点都由旧版本的 OpenSSL 和其他库提供支持，这些库不仅不支持 TLS 1.1 和 1.2，而且如果从客户端收到 TLS 1.1 支持的指示，还会立即关闭连接。换句话说，如果您在客户端中启用 TLS 1.1 支持，您将无法连接到某些服务器。
更新：忘记提及您可以使用第三方 SSL/TLS 实现（例如我们的 SecureBlackbox 产品中的实现）在您的 .NET 应用程序中获得 TLS 1.x 支持。
TLS 1.1 and 1.2 support has been added to Windows 7 and my understanding is that .NET relies on Windows' SChannel for TLS support. So I think the answer to your question is "depends on the OS".
Now you should remember, that most sites are powered by older versions of OpenSSL and other libraries which not just didn't support TLS 1.1 and 1.2, but closed connection immediately if they received indication of TLS 1.1 support from the client. In other words, if you enable TLS 1.1 support in your client, you won't be able to connect to some of servers.
Upd: Forgot to mention that you can use third-party SSL/TLS implementation (eg. the one in our SecureBlackbox product) to get TLS 1.x support in your .NET application.
您可以从这里开始记录自己：
通过证书身份验证实现传输安全
SslStream 类
here some places where you can start to document yourself:
Transport Security with Certificate Authentication
SslStream Class
它可以支持其中之一；支持来自底层 IIS，而不是 .NET。
有关如何启用 TLS 1.2 的详细信息，请参阅此处：http://support.microsoft.com/kb/245030 。请注意，目前只有少数浏览器支持它。
It can support either; the support comes from the underlying IIS, not .NET.
For details on how to enable TLS 1.2, see here: http://support.microsoft.com/kb/245030. Note that currently only a few browsers support it.