[openssl-dev] [openssl.org #3627] Enhancement request: add more "Protocol" options for SSL_CONF_CTX

Steffen Nurpmeso via RT rt at openssl.org
Thu Dec 11 13:15:10 UTC 2014


Hi.

Richard Moore <richmoore44 at gmail.com> wrote:
 |> Programs which use the OpenSSL library generally just want to flip a
 |> switch and know that they've "turned on security", instead of trying to

 |My experience suggests that while that might be what some developers want,
 |that's not what users want. They expect that if it works in the browser it
 |should work everywhere - even when the browser is jumping through hoops
 |like fetching missing intermediate certificates, downgrading security etc.

But now that it is christmas they can at least donate some dollars
to some charitable aid organisation.

 |If the world were perfect and the browsers didn't do this then life would
 |be a lot easier.

Ah, come on.  No.

--steffen




More information about the openssl-dev mailing list