From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=0.2 required=5.0 tests=DKIM_ADSP_CUSTOM_MED,
	DKIM_INVALID,DKIM_SIGNED,FREEMAIL_FROM autolearn=no autolearn_force=no
	version=3.4.4
Received: (qmail 22129 invoked from network); 24 Jan 2023 00:17:41 -0000
Received: from 9front.inri.net (168.235.81.73)
  by inbox.vuxu.org with ESMTPUTF8; 24 Jan 2023 00:17:41 -0000
Received: from mail-vk1-f177.google.com ([209.85.221.177]) by 9front; Mon Jan 23 19:16:21 -0500 2023
Received: by mail-vk1-f177.google.com with SMTP id v81so6857627vkv.5
        for <9front@9front.org>; Mon, 23 Jan 2023 16:16:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112;
        h=to:subject:message-id:date:from:references:in-reply-to:mime-version
         :from:to:cc:subject:date:message-id:reply-to;
        bh=wOS3BUIal86UFQwcUtOWmr2Mjah7TdxZuRExPicIJc0=;
        b=I72pr6Pk1lUnpDNJo9ZqC+3pvKPvlgburQ83AYiy6w7mcCEXwE5mVMcuiL2HYzTKqW
         2FyZTm/IqOazMTuhE8vfunrujUgFod2LsYhSY/t1Oxv98sKu2q7zYu1hQykj5Onvv0X6
         ZGNoI4zBO4urXV5hHdizBybvBbx5uJEX6yB4svxCgSTGaYiB0Iuecqx2l9SF+T4hJl1W
         DVQGjswu7VwiMwDZ3m2txxaG+YzxKMc8iPkXeHfZdNPlUqQ+rNQ6X7JX/RY+ojhQ322b
         XGrNgCDBmE3yrNUaqraCHRebk7Q4HbXsJ2QCW8pHuTx3xYAh+fsrzH0buAh6R6wQtGNX
         OgpQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112;
        h=to:subject:message-id:date:from:references:in-reply-to:mime-version
         :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
        bh=wOS3BUIal86UFQwcUtOWmr2Mjah7TdxZuRExPicIJc0=;
        b=W2/d/8yDiLsTr68y4aGqC990NHwJZvaXONcw75Tl5NML/dCgjLZO26HaABCNfexGMp
         BEQJu24hBCtuTzCib8fLun06EB9xiWDXNX524CwdXkC/mMVqGXHpJIB50HWKHwXNQ3eR
         41H456kBRys1N9Td4RBCHNXx+0qyo7PtVWYkmxX7P3jdKdr1tvHu9yORmWndWcRBEBzG
         YLplKAgd0avXEjDoGL+/VEU+cut3JmNlXmDANATQyT97YC8PYIfpDk3UfK2uf1geUS8g
         Ivly1XGufKSbMEuSW74bHFDGi69mWjcQhxUSnqWzDd/t9t+Wwlbxkwsiz1iSZvS7Fps8
         k1bg==
X-Gm-Message-State: AFqh2kp5dt6jREXYkQOHAeR64ruf5ByyMHYGrlmTG04C9afPUIo4EyHG
	1ooju5r74dTBczogDGbArW9mAC3vg+KW7GmQjFquIHXj
X-Google-Smtp-Source: AMrXdXu2d5xMQbwBvObvheVQKJw3fzKOJGccmrDBkrNUdZHbURArRSXuYCyCJCOTBewZsV60Yaa5lTW35HcEtVKZK0M=
X-Received: by 2002:a05:6122:1185:b0:3e1:9b14:2c68 with SMTP id
 x5-20020a056122118500b003e19b142c68mr3472658vkn.37.1674519377390; Mon, 23 Jan
 2023 16:16:17 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:ab0:5a66:0:0:0:0:0 with HTTP; Mon, 23 Jan 2023 16:16:16
 -0800 (PST)
In-Reply-To: <CAFSF3XMaUG5=rnjC8N5QguayhRfZBp86v5RftB2yC9j7yF8Wag@mail.gmail.com>
References: <87988F72F1C2D20B16DE8DA47FB8C262@alice> <CAFSF3XMJybj82PETOXxRpB7pGKdZTbNQMC_rdzJy=FMrqiaqvA@mail.gmail.com>
 <Y8sCIZbVVtT8msWF@alice> <CAFSF3XNY3t9j0UJk=2vtgn+ff4M9pvQ4N1C2Vq6f8_vCfYp6Mg@mail.gmail.com>
 <Y8tgc3fVyC5RRWFB@alice> <CAFSF3XNwVSnV6ixXVOdzQthkEZgUM48uN_X8NYAQ6v=d69FUCw@mail.gmail.com>
 <Y8zr/AKMunBzF1YM@alice> <CAFSF3XNRCt7uv4WCsfwfu1Mq8o5ff2+QgpHCrLM_CcMOKf0eAw@mail.gmail.com>
 <Y85s6z/imzZxd6Xh@alice> <CAFSF3XO2W4skzFJUsY2AikX-6R1=1rdH+cHsy_TFVT4_jrQsTQ@mail.gmail.com>
 <CAFSF3XMaUG5=rnjC8N5QguayhRfZBp86v5RftB2yC9j7yF8Wag@mail.gmail.com>
From: hiro <23hiro@gmail.com>
Date: Tue, 24 Jan 2023 01:16:16 +0100
Message-ID: <CAFSF3XO7W9TBhSPgvRwXdqcy-cnLq-XpieL6GchVJxFqKrLf6w@mail.gmail.com>
To: 9front@9front.org
Content-Type: text/plain; charset="UTF-8"
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: decentralized RESTful out-scaling SOAP over ACPI map/reduce callback manager 
Subject: Re: [9front] [PATCH] libsec: add minimal support for the tls
 renegotiation extension
Reply-To: 9front@9front.org
Precedence: bulk

also, maybe it's enough if we stop supporting tls1.2 ?
maybe tls1.1 and tls1.3 can be setup in a safe enough way already?

On 1/24/23, hiro <23hiro@gmail.com> wrote:
>> also, is there no way in openssl to turn off this behavior?
>
> https://github.com/openssl/openssl/issues/16278#issuecomment-896157863
>