On 01/03/2014 02:17 PM, Arne Schwabe wrote: > ACK. But isn't is better to use good to do the !EXP just in case and for > consistency for PolarSSL as well.
I agree that would be nice for consistency, but since PolarSSL supports neither export ciphers nor the 'DEFAULT'/'EXP'/etc cipher-suite group names that's not possible. -Steffan