[openssl-dev] [openssl.org #3627] Enhancement request: add more "Protocol" options for SSL_CONF_CTX

Yoav Nir ynir.ietf at gmail.com
Wed Dec 10 19:53:28 UTC 2014


> On Dec 10, 2014, at 9:31 PM, Daniel Kahn Gillmor via RT <rt at openssl.org> wrote:
> 
> 
> I'd love to see a version of bettercrypto.org that only has to say "to
> configure OpenSSL version 1.0.3 and higher, you should use the string
> BEST_PRACTICE”

I’d be much happier if that string was called “best_practice_2015”, and when a future version of OpenSSL added “best_practice_2017”, there would also be a wiki (or a site like bettercrypto) telling administrators what might happen if they switch (“you’ll lose support for all versions of Chrome below 52”)


More information about the openssl-dev mailing list