From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from u2.inri ([107.191.125.208]) by pp; Sat May 30 21:46:23 EDT 2015 Subject: NEW BOUNTIES: improve tls(3), SNI support in tlssrv, ICC color profiles Date: Sat, 30 May 2015 21:46:17 -0400 From: sl@9front.org To: 9front@9front.org Message-ID: <13b016944060652bfd117b8fb487b4a6@u2.inri> List-ID: <9front.9front.org> X-Glyph: ➈ X-Bullshit: realtime-java replication MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit REVISED: improve the tls(3) device $10 - The TLS device implements the record layer protocols of Transport Layer Security version 1.0 and Secure Sockets Layer version 3.0. It does not implement the handshake protocols, which are responsible for mutual authentication and key exchange. Wanted: more ciphers, support for user certificates, support for certificate verification. ECDSA! ECDHE! Based on this: http://okturing.com/src/2886/body someone may already be close to claiming $10 from me, on this one. ADDED: SNI support in tlssrv $1 - Server Name Indication (SNI) was recently added to tlsclient. Now, we'd like to be able to serve multiple certificates from a single instance of tlssrv. ADDED: ICC color profiles $10 - Support for calibrating displays using custom ICC color profiles. This is most useful for making livable laptops that have shitty LCD panels. sl