Re: [exim-dev] Support for SSL compression

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Philip Hazel
Date:  
À: Georg v. Zezschwitz
CC: exim-dev
Sujet: Re: [exim-dev] Support for SSL compression
On Thu, 12 May 2005, Georg v. Zezschwitz wrote:

> 1) Adding a global option "tls_supported_compression" to select compression
>    protocols to be supported for incoming connections.
>    e.g.:  "DEFLATE:NULL".
>    Default should be all std-protocols that the SSL-stack supports.


Could save a bit of typing by calling is "tls_support_compression" (but
I don't really mind).

> 2) Adding an smtp transport option "tls_prefered_compression" which contains the
>    list of prefered compression protocols: E.g.:
>       "DEFLATE:NULL"
>    or
>       "NULL"


Why not call it "tls_support_compression" as well? Compare 
tls_require_ciphers and tls_verify_certificates, which exist both as 
main options and as smtp transport options.  Besides, people may have
trouble remembering how to spell "preferred" :-)
                                       ^^

> Extending $tls_cipher to the format:
>
>      <protocol>:<cipher>:<bits>:<compression>

>
>      with compression = (NULL|DEFLATE|STAC) for now.


Seems OK to me.

> Hopefully my wife will give me some time this weekend :-)


Good luck!

Regards,
Philip

-- 
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.