☭
I go look at the Dillo source code to figure out how to actually use MbedTLS
The Dillo source code:
/*
* TLSv1.3 brings some changes, among them, having to call
* psa_crypto_init(), and a new way of resuming sessions,
* which is not currently supported by the code here.
*/
#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
mbedtls_ssl_conf_max_tls_version(&ssl_conf, MBEDTLS_SSL_VERSION_TLS1_2);
#endif
Hmm
Not sure whether there are any web pages that only support TLS1.3, but perhaps there will be in the future, so it's not good if my program doesn't support that stuff...
Follow
@vaporeon_ https://ssl-config.mozilla.org/ offurs a (non-default) “modern” recommendation fur TLS 1.3 only configurations, which is suggestive that people will eventually try to make 1.3 the floor of suppurrted purrotocols. overwhelmingly though you should be able to get away with TLS 1.2 suppurrt in your client in the near future and reasonably moderate future
@vaporeon_ i would recommend getting 1.3 to work if you can but i think it’ll be fine if you don’t