.NET Core: How to disable TLS/SSL for gRpc communication between service and client?

Question

I'm preparing the gRpc clients & services. Due the reason I won't publish them as the public services and they're encapsulated even in private networking to their own network segment - I don't need to encrypt the communication between them.

gRpc services are representing the bounded contexts (DDD) and they are united by the GraphQL API similar to the Rejoiner project ( https://rejoiner.io/ ), so the GraphQL API is only exposed to the API gateway ( as the external backend ), which is represented by the external Ingress controller.

So, how can I disable totally the TLS/SSL for the gRpc services, which are generated for the ASP.NET Core? Seems to be, the gRpc templates, which are used for the .NET Core 3 are proposing strictly the TLS/SSL use.

Answer 1

Downgrade .net to 2.0 SP 2. See https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0149