search

openssl / project

Tracking of project related issues
2 stars 1 forks source link

Investigate NULL cipher policy and communicate it to #22903 #433

Open hlandau opened 7 months ago

hlandau commented 7 months ago

Action item from discussion on 2024-01-30.

We need to know what is the current policy of use of NULL cipher in TLS-1.2.

https://github.com/openssl/openssl/pull/22903

romen commented 5 months ago

OTC: Do we want to write down a policy about NULL cipher usage that would alter the informal unwritten policy we currently apply, which would affect openssl/openssl#22903 ?

Consensus within OTC on the current informal policy is that, currently we don't enable NULL cipher by default, but we allow users to enable them if they wish to.

romen commented 5 months ago

OTC: We want to write down formally the current policy, beyond the current manpage documentation.