Message307931
Another reason to consider making it possible to disable renegotiation is HTTP/2. RFC 7540 says:
A deployment of HTTP/2 over TLS 1.2 MUST disable renegotiation. An
endpoint MUST treat a TLS renegotiation as a connection error
(Section 5.4.1) of type PROTOCOL_ERROR.
https://tools.ietf.org/html/rfc7540#section-9.2.1 |
|
| Date |
User |
Action |
Args |
| 2017-12-10 00:08:04 | njs | set | recipients:
+ njs, christian.heimes, chuq |
| 2017-12-10 00:08:04 | njs | set | messageid: <1512864484.87.0.213398074469.issue32257@psf.upfronthosting.co.za> |
| 2017-12-10 00:08:04 | njs | link | issue32257 messages |
| 2017-12-10 00:08:04 | njs | create | |
|