On 2017-04-25 Alexandre Viau <av...@debian.org> wrote: > Package: libgnutls30 > Version: 3.5.8-5 > Severity: normal
> Dear Maintainer, > Please enable heartbeart support, which is needed for newer versions of > the ring source package. okay, noted. > MTU discovery by heartbeat with DTLS is mentioned in RFC 6520 (DTLS)[1] > and defined in RFC 4821[2]. > It seems that heartbeat support was disabled in 2013, with no reason > given in the commit message[2]. [...] In 2013 gnutls 3.x was only available in experimental. I do not remember but I guess it was disabled because it seemed (still seems) to be a good idea to not enable exotic extensions unless they are actually used. Then in 2014 heartbleed followed. ;-) cu Andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure'