INN commit: branches/2.6/doc/pod (inn.conf.pod)
INN Commit
rra at isc.org
Sun Nov 11 14:43:42 UTC 2018
Date: Sunday, November 11, 2018 @ 06:43:41
Author: iulius
Revision: 10303
Mention in POD documentation that TLS 1.3 no longer allows TLS-level compression
Modified:
branches/2.6/doc/pod/inn.conf.pod
--------------+
inn.conf.pod | 9 +++++----
1 file changed, 5 insertions(+), 4 deletions(-)
Modified: inn.conf.pod
===================================================================
--- inn.conf.pod 2018-11-11 14:43:16 UTC (rev 10302)
+++ inn.conf.pod 2018-11-11 14:43:41 UTC (rev 10303)
@@ -1139,10 +1139,11 @@
=item I<tlscompression>
-Whether to enable or disable TLS/SSL-level compression support.
-This is a boolean and the default is false, that is to say compression
-is disabled, so as to follow the best current practices for a secure
-use of TLS in application protocols (see S<RFC 8143> for NNTP).
+Whether to enable or disable TLS/SSL-level compression support, if
+the negotiated protocol supports it (notably, S<TLS 1.3> no longer
+supports it). This is a boolean and the default is false, that is to say
+compression is disabled, so as to follow the best current practices for
+a secure use of TLS in application protocols (see S<RFC 8143> for NNTP).
Note that enabling TLS/SSL-level compression will be possible only if
the OpenSSL library INN has been built with, supports that feature.
More information about the inn-committers
mailing list