Howdy,

Here are two fresh (and annoying) issues we need to fix:

#1323 - remove export cipher suites from OpenSSL preference list
 https://sourceforge.net/p/curl/bugs/1323/

#1324 - curl built with SecureTransport includes support for NULL ciphersuites
        in ClientHello
 https://sourceforge.net/p/curl/bugs/1324/

Left to do is then to build curl with other TLS backends and try it against https://www.howsmyssl.com/a/check to see if there are more flaws in this style.

--

 / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Reply via email to