Re: Future TLS roadmap
Hi Daniel,
On 12 February 2014 13:22, Daniel Lowrey <[email protected]> wrote:
> FYI, these are things I plan to work on for the post-5.6 timeframe:
>
> - Support for SNI in *servers* (currently only supported by clients)
> - Support for DTLS (datagram client/server encryption)
> - Mitigating the client-initiated renegotiation DoS vector in TLS servers
>
> Most TLS changes could probably pass as "security fixes" and may be
> feasible for 5.6 bugfix releases. The alternative is obviously to put them
> in master and wait for 5.7. In any case we can cross that bridge when we
> get there.
I'd support the renegotiation DOS vector as a current bugfix - it's
been documented for what, 2 years now since a POC was published?
Paddy
--
Pádraic Brady
http://blog.astrumfutura.com
http://www.survivethedeepend.com
Zend Framework Community Review Team
Zend Framework PHP-FIG Representative
Thread (4 messages)