TScSSLServerOptions.ClientInitiatedRenegotiationIsAllowed

 

property ClientInitiatedRenegotiationIsAllowed: boolean; default False;

 

Description

Determines whether the server will allow client-initiated renegotiation.

Set ClientInitiatedRenegotiationIsAllowed to True to allow the client to renegotiate new encryption parameters. Note that the TLS/SSL renegotiation makes it easy to carry out a DoS attack by repeatedly initiating renegotiation, causing the server to waste resources.

Set ClientInitiatedRenegotiationIsAllowed to False to forbid the client to renegotiate new encryption parameters. If the client sends a renegotiation request, the server will deny it and close the connection. This behavior may protect against DoS attacks.

The default value is False.