INN commit: branches/2.6/doc/pod (inn.conf.pod)

INN Commit rra at isc.org
Sun Nov 11 14:43:42 UTC 2018


    Date: Sunday, November 11, 2018 @ 06:43:41
  Author: iulius
Revision: 10303

Mention in POD documentation that TLS 1.3 no longer allows TLS-level compression

Modified:
  branches/2.6/doc/pod/inn.conf.pod

--------------+
 inn.conf.pod |    9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

Modified: inn.conf.pod
===================================================================
--- inn.conf.pod	2018-11-11 14:43:16 UTC (rev 10302)
+++ inn.conf.pod	2018-11-11 14:43:41 UTC (rev 10303)
@@ -1139,10 +1139,11 @@
 
 =item I<tlscompression>
 
-Whether to enable or disable TLS/SSL-level compression support.
-This is a boolean and the default is false, that is to say compression
-is disabled, so as to follow the best current practices for a secure
-use of TLS in application protocols (see S<RFC 8143> for NNTP).
+Whether to enable or disable TLS/SSL-level compression support, if
+the negotiated protocol supports it (notably, S<TLS 1.3> no longer
+supports it).  This is a boolean and the default is false, that is to say
+compression is disabled, so as to follow the best current practices for
+a secure use of TLS in application protocols (see S<RFC 8143> for NNTP).
 
 Note that enabling TLS/SSL-level compression will be possible only if
 the OpenSSL library INN has been built with, supports that feature.



More information about the inn-committers mailing list