OpenSSL 4.0.0
github.com
OpenSSL 4.0.0
1–10 of 89 posts
Re: OpenSSL 4.0.0
#2Finally encrypted client hello support \o/
Re: OpenSSL 4.0.0
#3As a complete non-expert:
On the one hand, looks like decent cleanup. (IIRC, engines in particular will not be missed).
On the other hand, breaking compatibility is always a tradeoff, and I still remember 3.x being... not universally loved.
Re: OpenSSL 4.0.0
#4As a complete non-expert: On the one hand, looks like decent cleanup. (IIRC, engines in particular will not be missed). On the other hand, breaking compatibility is always a tradeoff, and I still remember 3.x being... not universally loved.
That's why it is version 4.
Re: OpenSSL 4.0.0
#5Just in time for the suckerpinch video
Re: OpenSSL 4.0.0
#6Finally encrypted client hello support \o/
Is this something that we can enable "today" or is it going to take 12 years for browsers and servers to support?
Re: OpenSSL 4.0.0
#7I wonder how hard it is to move from 3.x to 4.0.0 ?
From what I remember hearing, the move from 2 to 3 was hard.
Re: OpenSSL 4.0.0
#8I wonder how hard it is to move from 3.x to 4.0.0 ? From what I remember hearing, the move from 2 to 3 was hard.
That's because there was no version 2...
Re: OpenSSL 4.0.0
#9Finally encrypted client hello support \o/
Is this something that we can enable "today" or is it going to take 12 years for browsers and servers to support?
CloudFlare has supported it since 2023: https://blog.cloudflare.com/announcing-encrypted-client-hell... Firefox has had it enabled by default since version 119: https://support.mozilla.org/en-US/kb/faq-encrypted-client-he... so you can use it today.
Re: OpenSSL 4.0.0
#10https://www.haproxy.com/blog/state-of-ssl-stacks
According to this one should not be using v3 at all..