Future TLS roadmap
| From: | Daniel Lowrey | Date: | Wed, 12 Feb 2014 13:22:18 +0000 |
| Subject: | Future TLS roadmap | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-72518@lists.php.net to get a copy of this message | ||
FYI, these are things I plan to work on for the post-5.6 timeframe:
- Support for SNI in *servers* (currently only supported by clients)
- Support for DTLS (datagram client/server encryption)
- Mitigating the client-initiated renegotiation DoS vector in TLS servers
Most TLS changes could probably pass as "security fixes" and may be
feasible for 5.6 bugfix releases. The alternative is obviously to put them
in master and wait for 5.7. In any case we can cross that bridge when we
get there.
If people have other ideas/suggestions (or want to help) just let me know.
Daniel