https://bz.apache.org/bugzilla/show_bug.cgi?id=61948
--- Comment #2 from Remy Maucherat <r...@apache.org> --- Do you have any exceptions for legitimate TLS records ? If not, instead of validating all reads, it is reasonable to catch the exceptions and log as debug instead. I reviewed the code and it seems to properly validate the lengths, it requests more data, etc. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org