Open hlandau opened 7 months ago
OTC: Do we want to write down a policy about NULL cipher usage that would alter the informal unwritten policy we currently apply, which would affect openssl/openssl#22903 ?
Consensus within OTC on the current informal policy is that, currently we don't enable NULL cipher by default, but we allow users to enable them if they wish to.
OTC: We want to write down formally the current policy, beyond the current manpage documentation.
Action item from discussion on 2024-01-30.
We need to know what is the current policy of use of NULL cipher in TLS-1.2.
https://github.com/openssl/openssl/pull/22903