yaSSL replacement plan

--------------ms040209030701050106040102
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Language: en-US

Hello,

The MySQL Community Edition TLS implementation (yaSSL) is getting
outdated, and lacking in support for several newer features like TLS1.2.
I believe further development on yaSSL has ceased, and so it seems that
a full replacement of the library is necessary to stay up to date with
secure TLS best practices.

Are there plans for updating the TLS library used in the Community
Edition? If so what's the new targeted library and release candidate?

Thanks,

--=20
Steven Danneman
Security Engineer
Security Innovation | Seattle, WA



--------------ms040209030701050106040102
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms040209030701050106040102--