On 7/18/19 1:01 PM, Thomas Ward wrote:
> There's a few considerations here.  We need to make certain that such a
> rebuild to allow NGINX to control TLS 1.3 protocol or ciphers isn't
> going to introduce any additional TLS1.3 behaviors or feature
> functionality that otherwise would not be controlled by OpenSSL under

Offhand, have you already demonstrated to your satisfaction that TLSv1.3
served-up in Nginx is, in fact, using the TLSv1.3 ciphers? Regardless
of any 'additional' "behaviors or feature or functionality"?

Atm, in some simple testing I'm seeing that it doesn't -- and looking
for any evidence, anectdotal or otherwise, that it does so I can narrow
down if it's 'me' ...
_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel