Re: TLS 1.3 and SNI; test script included
Charles Cazabon <[email protected]>
| Newsgroups | gmane.mail.getmail.user |
|---|---|
| Message-ID | <[email protected]> |
ndre <[email protected]> wrote: > > So I ran your script and got the following results, highlight for > mail.fsf.org. Thanks for testing all these domains. The important part of the results is that adding SNI did not cause any connections to fail/be dropped, so users of those servers could expect a send-SNI-by-default getmail to continue to work, at least if they are using the "correct" DNS aliases for the server they were contacting. > Connecting to mail.fsf.org:993 > TLS 1.3, no SNI - connection failed ([SSL: UNSUPPORTED_PROTOCOL] unsupported > protocol (_ssl.c:727)) > TLS 1.3, with SNI - connection failed ([SSL: UNSUPPORTED_PROTOCOL] > unsupported protocol (_ssl.c:727)) Interesting, but not related to SNI. Dunno why the FSF server is failing to support TLS v.1.3. Charles -- ----------------------------------------------------------------------- Charles Cazabon GPL'ed software available at: http://pyropus.ca/software/ -----------------------------------------------------------------------