[nsd-users] NSD 4.13.0rc1 pre-release
Jannik Peters
jannik at nlnetlabs.nl
Wed Sep 3 08:40:03 UTC 2025
Hi,
Thanks for testing the pre-release.
> 1. ALPN/HTTP2 h2, spdy/3.1, http/1.1, grpc-exp, h2-fb, spdy/1, spdy/2, spdy/3, stun.turn, stun.nat-discovery, webrtc, c-webrtc, ftp (offered)
> I think, this is unneeded as DoT has nothing to do with HTTPS, it's simply TLS
>
> 2. Finite field group: ffdhe2048 ffdhe3072
> Most modern TLS stacks support Key-Exchange with Elliptic curves which are much faster and cheaper.
> Postfix, for example, offer an option to disable FFDHE at all: https://www.postfix.org/postconf.5.html#tls_ffdhe_auto_groups
And thanks for reporting this. We'll add it to our TODO list.
Best,
Jannik
More information about the nsd-users
mailing list