Table of Contents

Namespace EncDotNet.S100.Collections.Net

Classes

DistrustedKeys

Public keys this library refuses in any certificate chain, whatever the operating system's trust store says: CA keys known to be compromised. Each is matched by the SHA-256 of its DER-encoded SubjectPublicKeyInfo, so every certificate carrying the key is refused, including cross-signed copies under another root.

HardenedTls

Server-certificate validation layered over the operating system's: the platform's decision stands, and a chain it accepts is still refused when it carries a distrusted key or is revoked.

HardenedTlsOptions

How HardenedTls validates server certificates.

LibraryHttp

HTTP conventions of the Library's requests.

Enums

TlsRevocationStatus

What CheckRevocation(X509Certificate2, IEnumerable<X509Certificate2>, TimeSpan) found.