[openssl-users] is there an API to list all the TLS 1.3 cipher suite names?

Daniel Kahn Gillmor dkg at fifthhorseman.net
Wed Jan 9 21:21:27 UTC 2019


On Wed 2019-01-09 04:16:05 +0000, Jordan Brown wrote:
> On 1/8/2019 7:44 PM, Viktor Dukhovni wrote:
>> You could just provide a free-form emergency string parameter that
>> users are advised to not change unless some major advance makes it
>> necessary. At that time, advice can be published as to what the
>> override setting should be.
>
> That doesn't sound like a 21st century user interface.

a 21st century interface is: upgrade your software to the new patch
level that avoids the known flaws.

      --dkg


More information about the openssl-users mailing list