Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: =?UTF-8?Q?Arne_Vajh=C3=B8j?= <arne@vajhoej.dk>
Newsgroups: comp.os.vms
Subject: Re: SSL3 on OpenVMS V8.4-2L3
Date: Tue, 20 Aug 2024 21:42:35 -0400
Organization: A noiseless patient Spider
Lines: 29
Message-ID: <va3gmb$3ikur$5@dont-email.me>
References: <va2kk5$3fh8u$1@dont-email.me> <va3f2f$3iue9$5@dont-email.me>
 <va3fjn$3ikur$1@dont-email.me> <va3gjo$3iue9$13@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 21 Aug 2024 03:42:35 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="3ba9841a42d1dda3811ea9704efa0629";
	logging-data="3757019"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1/nVnJIeQo2mscl825tL3DH7NNsa1ahCho="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:N+KYBn6O72pGeXoh50oneO9JqWo=
Content-Language: en-US
In-Reply-To: <va3gjo$3iue9$13@dont-email.me>
Bytes: 2023

On 8/20/2024 9:41 PM, Lawrence D'Oliveiro wrote:
> On Tue, 20 Aug 2024 21:24:07 -0400, Arne Vajhøj wrote:
> 
>> On 8/20/2024 9:14 PM, Lawrence D'Oliveiro wrote:
>>>
>>> On Tue, 20 Aug 2024 10:43:31 -0700, jeffrey_dsi wrote:
>>>>
>>>> We recently updated a customer to OpenVMS V8.4-2l3 and SSL3 v3.0-13
>>>> after many conversations with VSI as to which version of SSL to run.
>>>
>>> All versions of SSL that are called “SSL” are obsolete. All the
>>> versions recommended for use have “TLS” in their name: TLS 1.3 is the
>>> current one, I think some are still using TLS 1.2. Nothing older than
>>> that is worth using any more.
>>
>> Protocols that are named SSL are obsolete.
>>
>> Software that are named SSL (and implementing TLS) is not obsolete.
> 
> SSL v3 is obsolete.

SSL V3 protocol is obsolete.

VMS SSL3 kit which is a port of OpenSSL 3.x is not obsolete.

Protocol <> Software

Arne