[nsd-users] NSD 4.13.0rc1 pre-release

Jannik Peters jannik at nlnetlabs.nl
Wed Sep 3 08:40:03 UTC 2025


Hi,

Thanks for testing the pre-release.



> 1.  ALPN/HTTP2 h2, spdy/3.1, http/1.1, grpc-exp, h2-fb, spdy/1, spdy/2, spdy/3, stun.turn, stun.nat-discovery, webrtc, c-webrtc, ftp (offered)
> I think, this is unneeded as DoT has nothing to do with HTTPS, it's simply TLS
>
> 2.  Finite field group:          ffdhe2048 ffdhe3072
> Most modern TLS stacks support Key-Exchange with Elliptic curves which are much faster and cheaper.
> Postfix, for example, offer an option to disable FFDHE at all: https://www.postfix.org/postconf.5.html#tls_ffdhe_auto_groups

And thanks for reporting this. We'll add it to our TODO list.

Best,
Jannik


More information about the nsd-users mailing list