From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Jeff Sickel <jas@corpus-callosum.com>
In-Reply-To: <b3cdc98f344d50091e9c4934209e6b80@quintile.net>
Date: Thu, 17 Sep 2015 10:42:40 -0500
Content-Transfer-Encoding: 7bit
Message-Id: <FBF0E5A2-6D1A-4283-919B-63AA45ACB435@corpus-callosum.com>
References: <b3cdc98f344d50091e9c4934209e6b80@quintile.net>
To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net>
Subject: Re: [9fans] tls and iphones and ios9 (sigh)
Topicbox-Message-UUID: 6aac5502-ead9-11e9-9d60-3106f5b1d025


> On Sep 17, 2015, at 9:33 AM, Steve Simon <steve@quintile.net> wrote:
>
> I upgraded my iphone to ios9 and now cannot access my email on plan9 -
> no sniggering at the back.
>
> It seems apple require 1024bit keys for Diffe helman exchanges in TLS,
> and DH + RSA is no longer sypported at all.
>
> Primarly this is a warning to 9fans about the perils of ios9
> and a vain hope that somone might be looking at modifying libsec.
>
> -Steve
>

A good warning as OS X 10.11 will be using the same App Transport Security
as iOS 9, both using TLS 1.2.

Might be time to combover RFC 5246 and reconcile libsec and devtls.

-jas