[openssl-users] stunnel 5.46 released

Viktor Dukhovni openssl-users at dukhovni.org
Thu May 31 19:43:31 UTC 2018



> On May 31, 2018, at 2:43 PM, Blumenthal, Uri - 0553 - MITLL <uri at ll.mit.edu> wrote:
> 
> FWIW, I'm with Viktor in this argument. From cryptography point of view he's right. I suspect he's right from the practical point of view as well.

This is not so much a matter of "right" or "wrong" as arguably
"sensibly pragmatic" vs. "counter-productively cautious", or is
it "negligently careless" vs. "duly conservative"?

So these are judgement calls, but:

  https://tools.ietf.org/html/rfc7525#section-4.2

does recommend both DHE and ECDHE, so I'm on solid
ground viz. the IETF.

-- 
	Viktor.



More information about the openssl-users mailing list