Re: TLS 1.3

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



briefly -> "some benefits that involve some problems that need the
server to support something to prevent them"

And now more seriously I read a quick explanation on the benefits on
twitter yesterday, I'm sure there are more authorizative sources but
it seems like a quick way to catch up if you are interested.

https://twitter.com/colmmacc/status/978430840198742016

2018-03-28 17:02 GMT+02:00 David Mehler <dave.mehler@xxxxxxxxx>:
> Hi,
>
> I didn't know TLS 1.3 was out, thought it was next year before we'd
> see it. What are some advantages of 1.3?
>
> Thanks.
> Dave.
>
>
> On 3/28/18, Stefan Eissing <stefan.eissing@xxxxxxxxxxxxx> wrote:
>> Glad you asked: I just committed r1827912 into trunk that adds support for
>> TLSv1.3 when linking against OpenSSL v.1.1.1-pre3. This does allow TLSv1.3
>> clients to talk that version to the server, but it will not enable any fancy
>> early data or such. There is more support needed in the server to protect
>> against replay attacks etc.
>>
>> Maybe some people who link against other SSL libraries want to have a look
>> and see what needs changing to work with those. Libressl is the most famous
>> for requiring special attention here.
>>
>> One the change seems ok, I'll propose it for backport into the next 2.4.x
>> release.
>>
>> Cheers,
>>
>> Stefan
>>
>>> Am 28.03.2018 um 08:58 schrieb @lbutlr <kremels@xxxxxxxxx>:
>>>
>>> Now that TLS 1.3 has been approved, what is the status of using it with
>>> Apache? Last I heard apache 2.4 couldn't build agains openssl 1.1, but
>>> that was a year ago.
>>>
>>>
>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>



-- 
Daniel Ferradal
HTTPD Project
#httpd help at Freenode

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx




[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux