TLS 1.3

[jbenet]

I'm assuming forge does not implement TLS 1.3, because i couldn't find mentions on it. Is this high in the priority queue? i know the team has LOTS to do :)

https://github.com/digitalbazaar/forge#tls should probably mention the versions of TLS supported.

(Edit: cute, issue #404)

[dlongley]

@jbenet,

I'm assuming forge does not implement TLS 1.3, because i couldn't find mentions on it. Is this high in the priority queue? i know the team has LOTS to do :)

Not high on the priority queue, unfortunately. And, like you said, we've got a lot going on. :)

https://github.com/digitalbazaar/forge#tls should probably mention the versions of TLS supported.

Yes, we should. Currently 1.1 and 1.0 are supported, a fair bit of work has gone into supporting 1.2, but we haven't had the resources to finish that off.

[lancejpollard]

What is required to support 1.3 if I may ask?

[jawj]

It's much less full-featured than Forge, and still at an experimental stage, but I've implemented a TLS 1.3 client on top of SubtleCrypto: https://github.com/jawj/subtls