4 ms·
> There's never a situation in which a website might want to negotiate eNULL instead of an encrypted option. Precisely, without some magic handwaving there are
by Avamander 1y ago
> There's never a situation in which a website might want to negotiate eNULL instead of an encrypted option.
Precisely, without some magic handwaving there aren't any reasons.
eNULL was/would also kinda useful if one wanted to debug something without turning off TLS completely. But that's not worth the complexity keeping it around.