Closed EnDe closed 1 month ago
all checks (like +pfs, +cipher_pfs) report TLS13-* ciphers as "do not support PFS". This is wrong, because TLSv1.3 allows PFS ciphers only.
Some PFS ciphers are also not detected because the cipher constant is not checked well. This results only in a wrong count of PFS ciphers in +cipher (=== Ciphers: Summary ===).
fixed in o-saft.pl.
all checks (like +pfs, +cipher_pfs) report TLS13-* ciphers as "do not support PFS". This is wrong, because TLSv1.3 allows PFS ciphers only.