Re: Future TLS roadmap

Hi Daniel, On 12 February 2014 13:22, Daniel Lowrey <rdlowrey@gmail.com> wrote: > FYI, these are things I plan to work on for the post-5.6 timeframe: > > - Support for SNI in *servers* (currently only supported by clients) > - Support for DTLS (datagram client/server encryption) > - Mitigating the client-initiated renegotiation DoS vector in TLS servers > > Most TLS changes could probably pass as "security fixes" and may be > feasible for 5.6 bugfix releases. The alternative is obviously to put them > in master and wait for 5.7. In any case we can cross that bridge when we > get there. I'd support the renegotiation DOS vector as a current bugfix - it's been documented for what, 2 years now since a POC was published? Paddy -- Pádraic Brady http://blog.astrumfutura.com http://www.survivethedeepend.com Zend Framework Community Review Team Zend Framework PHP-FIG Representative