TLS 1.3 support?

[Simon-Laux]

was reported on the forum:

• https://support.delta.chat/t/tls-1-3-support-on-ios/2239
• https://support.delta.chat/t/does-delta-chat-support-tls-1-3/2231

Can we fix it or is it because we use system ssl or sth like that? Or do we just need to update openssl in DC core?

[r10s]

is this even an ios issue? also, not sure how practical only-tls-1.3 is, according to https://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.3 this looks like bleeding edge to me, probably at some point support will get better automatically? cc @link2xt

[link2xt]

In the end we use https://lib.rs/crates/native-tls which uses OpenSSL normally, but native implementation on macOS and Windows. New OpenSSL versions now have TLS 1.3 enabled by default, but generally speaking it is not supported yet. There is an upstream PR sfackler/rust-native-tls#235 with some discussion.

[link2xt]

More direct upstream issue: sfackler/rust-native-tls#140

[r10s]

k, thanks for the information and the links. so that will probably fade in then.

currently, it seems not advisable to set up a server only supporting TLS 1.3.

closing this issue as there is nothing ios can do about it.