Re: [TLS] no fallbacks please [was: Downgrade protection, fallbacks, and server time]

2016-06-10 Thread Tony Arcieri
On Friday, June 10, 2016, Nikos Mavrogiannopoulos wrote: > I'm actually surprised you mention the microsoft servers as being > version negotiation tolerant. They were the most prominent examples > of terminating the handshake if TLS 1.2 was offered to them > Personally I'd give

Re: [TLS] [Uta] Compression along with TLS in NNTP

2016-06-10 Thread Julien ÉLIE
Last year, in September 2015, we spoke about the removal of TLS-level compression in TLS 1.2. Of course one should read "TLS 1.3". -- Julien ÉLIE « I don't worry about terrorism. I was married for two years. » (Sam Kinison) ___ TLS mailing list

[TLS] Compression along with TLS in NNTP

2016-06-10 Thread Julien ÉLIE
Hi all, Last year, in September 2015, we spoke about the removal of TLS-level compression in TLS 1.2. NNTP was relying on this feature provided by previous TLS versions to compress data. We agreed that the right move was to standardize a new NNTP command. It is what we finally did with the