disable renogotiation
John <[email protected]> Wed, 16 Jun 2021 10:15:47 +0000
| Newsgroups | gmane.network.gnutls.general |
|---|---|
| Message-ID | <JESwjMKBPu-95ANLjfB1Ya7wHUj8guu3uvFKVVCGatBhJPLRRnwUbVNQgJ3FZJjWJNwenwqeMooW7akmrp0EdnAE2JhCoYrhMv8RW_NIwg4=@protonmail.com> |
Hello, Is there a way in Gnutls to disable renogotiation on TLS and a way to disable client initiated secure renegotiation? This is useful to harden the server. For example Exim4+Gnutls on Debian 10. There does not seem to be a need to support renegotiation or resumption on a mail server, because STARTTLS sessions are set up in each SMTP session. Disabling renegotiation reduces the attack surface. Thanks John _______________________________________________ Gnutls-help mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnutls-help