Re: [DISCUSS] PIP-324: Alpine Docker images

2023-12-15 Thread YuWei Sung
Another alternative is Redhat's ubi-minimal. It is glibc and has longer support. Alpine support is around 2 years. https://gist.github.com/yuweisung/9a40b7af71cdf2dfbb4f7c52825acf35 Yu Wei Sung Sr. Technologist OCTO streamnative.io

Re: [DISCUSS] Using bouncycastle fips instead bouncycastle non-fips

2023-03-01 Thread YuWei Sung
BC and BC-FIPS differences are the cipher suites. This is similar to TLS1.1 vs 1.2 vs 1.3. Some suites are deprecated (not secured enough due to compute power improvement). in TLS 1.3, client has no chance to specific weak cipher suites to connect to server and exploit the weakness. For BC-FIPS har