ulidtko commented on pull request #2197:
URL: https://github.com/apache/thrift/pull/2197#issuecomment-670445558


   Hi @zeshuai007 
   
   >  SSL3.0 is abandoned
   
   That's a good update.
   
   > and TLS1.3+TLS1.2 is used by default. However, the Java server uses TLS1.2 
by default and does not support TLS1.3.
   
   This gives me doubt about whether the root cause was identified correctly 
and precisely. TLS protocol, just like every other good protocol, has versions, 
and allows both the client and the server to support multiple versions. As long 
as the Java server speaks TLS1.2, any client which speaks TLS1.2 should be able 
to connect — regardless of TLS1.3.
   
   > The Erlang community released OTP-23 in May this year.
   
   BTW, last successful build of `master` on Travis is **7 months** old. I am 
in doubt whether Erlang update is really relevant. But I understand that it 
certainly makes finding the real root cause more complicated.
   
   > It may be set to OTP-22.
   That's not a good idea. It will only entrench the stagnation and multiply 
the effort to update for the next engineer.
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to