Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> There's never a situation in which a website might want to negotiate eNULL instead of an encrypted option.

Precisely, without some magic handwaving there aren't any reasons.

eNULL was/would also kinda useful if one wanted to debug something without turning off TLS completely. But that's not worth the complexity keeping it around.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: