Re: Improved TLS Defaults
Hello internals!
I've added a major new section to the Improved TLS Defaults RFC which can
be found here:
https://wiki.php.net/rfc/improved-tls-defaults#stream_wrapper_creep
I was initially hesitant to include these changes in the RFC because they
have no BC implications. However, upon further contemplation I think the
proposed deprecations in the new "Stream Wrapper Creep" section are
important to incorporate as part of the larger theme of improving the
default level of TLS security in 5.6. In my opinion it's only sensible to
apply as many TLS improvements as possible in one release instead of
stringing them out across multiples.
I don't yet have a patch publicly available however I've implemented all of
the proposed changes locally without failures in the existing test suite.
The relevant patch will be made available once I'm able to add new tests
for the proposed functionality.
As usual, any and all comments are welcome and appreciated.
Cheers!
Daniel
Thread (19 messages)