[openssl-users] Does openssl server always choose highest TLS version offered?

Salz, Rich rsalz at akamai.com
Tue Nov 17 23:25:11 UTC 2015


?  I have seen rumors (nothing reliable) that the TLS WG is proposing
to disable a whole lot of good cipher suites in TLS 1.3.

Well, it's pretty easy to verify.  Look at the IETF TLS-WG web page, and get a pointer to the current draft doc.

Yes, TLS removes non-AEAD ciphers, and has only PFS key exchange.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20151117/cd630007/attachment.html>


More information about the openssl-users mailing list