Daniel McCarney

> In order to make ring support some architectures, I hope to upgrade ring to 0.17 as soon as possible @PikuZheng I believe *ring* 0.17 is _already_ available with Quinn....

> anything i'm missing? No, this was my mistake. I forgot Quinn also has *ring* in its public API and didn't take the breaking change to update to 0.17 in...

> there is currently nothing comparable for OpenSSL. There is a [compatibility layer](https://github.com/rustls/rustls-openssl-compat) that can be used to replace OpenSSL's `libssl.so` with Rustls subject to many caveats w.r.t supported APIs....

See also https://github.com/serokell/deploy-rs/issues/232

See also https://github.com/ossec/ossec-hids/issues/714

> I dont see this as an issue in this case since we're using a hash of the value (rather than the value) that results in a 128-bit key. You...

:wave: I think this issue should be moved from here to [x509-parser](https://github.com/rusticata/x509-parser). It's the one that offers the (deprecated) [`parse_x509_der`](https://docs.rs/x509-parser/latest/x509_parser/fn.parse_x509_der.html) fn. From my perspective I'm not sure this is something...

> At suricata, we have to deal with traffic as it is found on the wire, not as it's in RFCs. That's fair and I can understand the desire to...

The `ConnectionState` enum is `non_exhaustive` so adding new states there isn't semver breaking in itself. I think it would be more a question of how the semantics of the overall...

I don't think this issue surfaced a workable alternative we could implement that doesn't have its own new set of downsides. I'm personally leaning towards saying we should close the...