Ticket Change Details
Overview

Artifact ID: 7c4f431d5e4596aeef09fcfa6a4d232bb76ef4f70d86f3af3779a47dc2cfc9fc
Ticket: 9d503a1cac442edf040bad487d795892ea19f2db
Make -require 1 the default
User & Date: anonymous on 2018-09-22 09:16:56
Changes

  1. foundin changed to: "1.7.16"
  2. icomment:
    Currently the -require flag defaults to 0/off, which means that TclTLS does not require the other party to present any kind of certificate to authenticate itself. This means that a completely unauthenticated key exchange is performed and so you could be talking to anybody. All the security properties of TLS are void in this mode, so turning it off should be a quite rare thing to do.
    
  3. login: "anonymous"
  4. mimetype: "text/html"
  5. private_contact changed to: "4d3bc24d727f6c89fb1509fef02f21887282efcc"
  6. severity changed to: "Important"
  7. status changed to: "Open"
  8. title changed to: "Make -require 1 the default"
  9. type changed to: "Feature Request"