2 comments

  • sidewndr46 17 minutes ago
    Couldn't folks just use TLS 1.3?
    • 0ckpuppet 14 minutes ago
      These prescriptions apply only to (D)TLS 1.2, since (D)TLS 1.0 and TLS 1.1 are deprecated by RFC 8996 and (D)TLS 1.3 either does not use the affected algorithms or does not share the relevant configuration options. (There is no DTLS version 1.1.)
    • ImPostingOnHN 15 minutes ago
      better to break tons of existing installations and require confusing, arcane config file modifications just for folks to get things back to where they were before being broken