Add note clarifying TLS use in HttpListener (#128084)

wfurt · Copilot · web-flow · commit 52090b9f07a1 · 2026-05-12T21:11:39.000-07:00
doc only.

---------

Co-authored-by: Copilot Autofix powered by AI &lt;175728472+Copilot@users.noreply.github.com&gt;
diff --git a/src/libraries/System.Net.HttpListener/src/System/Net/Managed/HttpConnection.cs b/src/libraries/System.Net.HttpListener/src/System/Net/Managed/HttpConnection.cs
@@ -84,6 +84,11 @@ public HttpConnection(Socket sock, HttpEndPointListener epl, bool secure, X509Ce
             else
             {
 #pragma warning disable CA5359
+                // This part is actually never called because LoadCertificateAndKey always returns null
+                // and for managed implementation we never negotiate TLS. If this ever changes we will need to re-think
+                // how we deal with client certs and probably also remove "disable CA5359".
+                // Doing full validation brings its own problems ... like AIA processing and possibly access to untrusted sites.
+                // so that should probably be driven by user configuration.
                 _sslStream = HttpListener.CreateSslStream(new NetworkStream(sock, false), false, (t, c, ch, e) =>
                 {
                     if (c == null)

Original file line number	Diff line number	Diff line change
`@@ -84,6 +84,11 @@ public HttpConnection(Socket sock, HttpEndPointListener epl, bool secure, X509Ce`
`84`	`84`	`else`
`85`	`85`	`{`
`86`	`86`	`#pragma warning disable CA5359`
	`87`	`+ // This part is actually never called because LoadCertificateAndKey always returns null`
	`88`	`+ // and for managed implementation we never negotiate TLS. If this ever changes we will need to re-think`
	`89`	`+ // how we deal with client certs and probably also remove "disable CA5359".`
	`90`	`+ // Doing full validation brings its own problems ... like AIA processing and possibly access to untrusted sites.`
	`91`	`+ // so that should probably be driven by user configuration.`
`87`	`92`	`_sslStream = HttpListener.CreateSslStream(new NetworkStream(sock, false), false, (t, c, ch, e) =>`
`88`	`93`	`{`
`89`	`94`	`if (c == null)`