[jdev] manifesto 0.4

[Matt Miller]

On Nov 7, 2013, at 1:32 PM, Philipp Hancke <fippo at goodadvice.pages.de> wrote:

> Am 07.11.2013 22:03, schrieb Mathieu Pasquet:
>> On updating software/hardware, I think it is reasonable to assume that
>> anything that runs today is able to negociate TLSv1, which I consider
>> the baseline. The manifesto says that software that endorses it must
>> be able to negociate and prefer TLSv1.2; I consider that as *new
>> versions* of the software, on an up-to-date system.
> 
> Right. So for example (I had to verify this today), on Windows XP schannel, which is the MSFT API for doing TLS, does TLS 1.0.
> It's not able to do TLS1.2. When using that OS you probably have other things to worry about.

Regarding just Windows:  < http://windows.microsoft.com/en-us/windows/products/lifecycle >

Windows XP will stop receiving any sort of support for those that have paid Microsoft extra money for it by April of next year.  Support for the vast majority of people ended 4 years ago.

Maybe this is something to consider in the milestones of the manifesto, or not.  I personally am committed to support the current milestones for the software I personally operate.


- m&m

Matthew A. Miller
< http://goo.gl/LK55L >

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://www.jabber.org/jdev/attachments/20131107/39ce11f5/attachment.pgp>