Skip to content
Permalink
Browse files

Add David's downgrade checks, Dirk's improvements for OpenBSD

  • Loading branch information
drwetter committed Jan 8, 2020
1 parent a42b98c commit 554b49bc75ecbac0bea797b8b45c7a3776ab2439
Showing with 4 additions and 2 deletions.
  1. +4 −2 CHANGELOG.md
@@ -4,9 +4,11 @@
### Features implemented in 3.0

* Full support of TLS 1.3, shows also drafts supported
* Extended protocol downgrade checks
* ROBOT check
* Better TLS extension support
* Better OpenSSL 1.1.1 and higher versions support
* Better OpenSSL 1.1.1 and higher versions support as well as LibreSSL >3
* More robustness for OpenBSD
* DNS over Proxy and other proxy improvements
* Decoding of unencrypted BIG IP cookies
* Initial client certificate support
@@ -27,7 +29,7 @@
* TLS Robustness check (GREASE)
* Server preference distinguishes between TLS 1.3 and lower protocols
* Mark TLS 1.0 and TLS 1.1 as deprecated
* Does a few startup checks which make later tests easier and faster (determine_optimal_\*() )
* Does a few startup checks which make later tests easier and faster (``determine_optimal_\*()``)
* Expect-CT Header Detection
* `--phone-out` does certificate revocation checks via OCSP (LDAP+HTTP) and with CRL
* `--phone-out` checks whether the private key has been compromised via https://pwnedkeys.com/

0 comments on commit 554b49b

Please sign in to comment.
You can’t perform that action at this time.