Re: Improved TLS Defaults

Hello internals! I've added a major new section to the Improved TLS Defaults RFC which can be found here: https://wiki.php.net/rfc/improved-tls-defaults#stream_wrapper_creep I was initially hesitant to include these changes in the RFC because they have no BC implications. However, upon further contemplation I think the proposed deprecations in the new "Stream Wrapper Creep" section are important to incorporate as part of the larger theme of improving the default level of TLS security in 5.6. In my opinion it's only sensible to apply as many TLS improvements as possible in one release instead of stringing them out across multiples. I don't yet have a patch publicly available however I've implemented all of the proposed changes locally without failures in the existing test suite. The relevant patch will be made available once I'm able to add new tests for the proposed functionality. As usual, any and all comments are welcome and appreciated. Cheers! Daniel