On Thu, 27 Nov 2014, Manuel Schoelling wrote:
> Hi,
>
> I hope this is the right mailing list for discussing this issue. I could
> not find any information about a mailing list on libressl.org.
Here is fine.
> It currently looks like the libtls version does not set a list of secure
> ciphers by default (e.g. that does not include MD5 or SHA-1).
> Would it be a reasonable idea to include secure defaults in libtls?
Yes - there are plans for this.
> I also noticed that libtls is currently supporting SOCK_STREAM (TLS)
> connections only. Is the support of SOCK_DGRAM (DTLS) connections within
> the scope of this library and would patches be accepted?
I do not have any objection to supporting datagram sockets, however it is not
a primary interest/focus and there are many things that would likely get
implemented prior to looking at it. That said, if you have a use case for it
and can make it fit with the API, we'll happy review diffs.
--
"Action without study is fatal. Study without action is futile."
-- Mary Ritter Beard