On Mon, Dec 3, 2012 at 10:38 AM, Gustaf Neumann <neum...@wu.ac.at> wrote:
>
> All changes are on bitbucket (nsssl and naviserver-connthreadqueue).
I found this nifty site the other day:
https://www.ssllabs.com/ssltest/analyze.html?d=next-scripting.org
It's highlighting a few things that need fixed in the nsssl module,
including a couple of security bugs. Looks like relatively little code
though.
Also, there's this:
https://insouciant.org/tech/ssl-performance-case-study/
which is a pretty good explanation of things from a performance point
of view. I haven't spent much time looking at SSL. Looks like there
could be some big wins. For example, some of the stuff to do with
certificate chains could probably be automated - the server could spit
out an informative error to the log if things look poorly optimised.
------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel
