For the Windows TLS stack, TLS 1.3 codebase is somewhat separate from TLS <= 
1.2, but we certainly read/review/fuzz/pen-test both 1.2 and 1.3.

Cheers,

Andrei

From: Uta <uta-boun...@ietf.org> On Behalf Of Salz, Rich
Sent: Wednesday, July 13, 2022 2:00 PM
To: Rob Sayre <say...@gmail.com>; Peter Saint-Andre <stpe...@stpeter.im>
Cc: Benjamin Kaduk <ka...@mit.edu>; sec...@ietf.org; 
draft-ietf-uta-rfc7525bis....@ietf.org; last-c...@ietf.org; uta@ietf.org
Subject: [EXTERNAL] Re: [Uta] [Last-Call] Secdir telechat review of 
draft-ietf-uta-rfc7525bis-09


  *   Every TLS implementation maintains divided codebases for 1.2 vs 1.3. No 
one reads the TLS 1.2 code very closely these days, in my experience

Strongly disagree.  OpenSSL, and its forks do not have a divided codebase.

As for reading the code, I can’t argue with your experience, but in my 
experience this is not the case.

_______________________________________________
Uta mailing list
Uta@ietf.org
https://www.ietf.org/mailman/listinfo/uta

Reply via email to