[RFC] TLS Peer Verification

From: Date: Wed, 16 Oct 2013 13:38:07 +0000
Subject: [RFC] TLS Peer Verification
Groups: php.internals 
Request: Send a blank email to internals+get-69583@lists.php.net to get a copy of this message
To those interested, a patch enabling TLS peer verification by default for client streams is now available here: https://wiki.php.net/rfc/tls-peer-verification Please note that this RFC is limited to client peer verification. I *do* have other outstanding ext/openssl PRs (atomic, tested) that do not merit RFC discussion (but are no less important). Each of these PRs addresses existing TLS security issues without breaking BC: Honor Cipher Order https://github.com/php/php-src/pull/493 Client-Initiated Renegotiation DoS https://github.com/php/php-src/pull/486 TLSv1.1 and TLSv1.2 Support https://github.com/php/php-src/pull/483

« previous php.internals (#69583) next »