3 ms·
Moxie, have you had any success with getting TACK into OpenSSL builds with the various distributions? It's not a big deal to rebuild nginx/apache but I would t
by newman314 13y ago
Moxie, have you had any success with getting TACK into OpenSSL builds with the various distributions?
It's not a big deal to rebuild nginx/apache but I would think that getting TACK to ship default with OpenSSL would go a long way in getting more adoption.
- trevp 13y agoWe have support for a"ServerInfo" file checked into OpenSSL. This is a file with PEM blobs that can specify TACK and similar data (e.g. Certificate Transparency) that an OpenSSL server will return to clients if requested. This is a generic mechanism for TLS Extensions instead of TACK-specific, but it's what we need. It will hopefully appear in OpenSSL 1.0.2. We'll be submitting Apache patches for it shortly. Daniel Jackoway (in this thread somewhere) is working on the NSS (client-side) corollary.