Re: F29 Self-Contained Change: GnuTLS enables TLS 1.3 by default
Le dimanche 23 septembre 2018 à 09:40 -0500, mcatanzaro(a)gnome.org a
écrit :
There's really nothing more to say about the problem than what's
explained there. If you want to connect to Google with TLS 1.3 you're
going to have to use SNI, because Google has decided to require it.
??? That's not a Google choice, SNI is one of the Mandatory-to-Implement
Extensions in TLS 1.3. You'll need it to connect to anything that claims
TLS 1.3 (which will be everyone as soon as someone publishes a hole in
TLS 1.2)
Of course Google *was* heavily involved in the TLS 1.3 draft, and *is*
working on obsoleting SNI as it exists today in favour of an encrypted
variant.
--
Nicolas Mailhot