Re: [openssl-users] Anonymous DH (ADH) in real world applications

2018-08-20 Thread Viktor Dukhovni
> On Aug 19, 2018, at 8:41 AM, Kurt Roeckx wrote: > >> Does anyone know some examples of applications using >> ADH ciphersuites for TLS connections in production >> environment? > > At least postfix can use it for SMTP. And prefers it by default with opportunistic TLS, when authentication

Re: [openssl-users] Anonymous DH (ADH) in real world applications

2018-08-20 Thread Jakob Bohm
On 19/08/2018 14:36, Anton wrote: Hello Does anyone know some examples of applications using ADH ciphersuites for TLS connections in production environment? I know it is vulnerable to MITM, but it still can be useful, for example if communicating devices do not store state data for

Re: [openssl-users] Anonymous DH (ADH) in real world applications

2018-08-19 Thread Kurt Roeckx
On Sun, Aug 19, 2018 at 02:36:30PM +0200, Anton wrote: > Hello > > Does anyone know some examples of applications using > ADH ciphersuites for TLS connections in production > environment? At least postfix can use it for SMTP. Kurt -- openssl-users mailing list To unsubscribe:

[openssl-users] Anonymous DH (ADH) in real world applications

2018-08-19 Thread Anton
Hello Does anyone know some examples of applications using ADH ciphersuites for TLS connections in production environment? I know it is vulnerable to MITM, but it still can be useful, for example if communicating devices do not store state data for authentication (unique certificate per