Daiki Ueno <[email protected]> writes:

> Hello,
>
> I've created a wiki page to collect significant changes planned for
> GnuTLS 4.0 (or 3.9):
> https://gitlab.com/gnutls/gnutls/-/wikis/Planning-for-4.0

+1 to dropping srptool, but keeping gnutls_srp* for ABI but returning
failure.

I think libgnutls-openssl never really took off.  Is anyone using this?
I wonder about its usefulness.

I worry a bit about hard-depending on Nettle 4.0 if this makes building
on some still supported platforms (RHEL9?) problematic.  Couldn't we
depend on Nettle 4.x for ML-KEM/DSA and if Nettle 4.x is not available,
simply not support ML-KEM/DSA?  OTOH if this means regressing from
having supported ML-KEM/DSA via leancrypto, maybe this is not a good idea.

/Simon

> If you have any further ideas or disagree with the currently planned
> items, don't hesitate to speak up :-)
>
> Regards,
>
> Daiki Ueno <[email protected]> writes:
>
>> Simon Josefsson <[email protected]> writes:
>>
>>> Daiki Ueno <[email protected]> writes:
>>>
>>>> On a slightly related note, we might also want to plan a new major
>>>> release (3.9 or 4.0) with backward incompatible changes, such as default
>>>> cipher selections.
>>>
>>> What kind of backward incompatible API/ABI change are you thinking of?
>>
>> I meant more about backward incompatible "behavior" changes, such as:
>> https://gitlab.com/gnutls/gnutls/-/issues/1761
>> https://gitlab.com/gnutls/gnutls/-/issues/1772
>>
>>> I think doing backwards incompatible changes that affect running code
>>> out there is often just a bad idea, so IMHO it would be nice to
>>> enumerate the API/ABI changes for consideration, and then run reverse
>>> builds of Debian/Fedora packages using GnuTLS to see what breaks.
>>
>> I agree.  Even if we disable some already deprecated functionality, such
>> as SRP, we will likely keep the API/ABI (but may turn it no-op).
>>
>> Regards,

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Gnutls-help mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnutls-help

Reply via email to