Compile-time disable weak curves in TLS by default in 4.0
RFC 8422 has deprecated some weak elliptic curves in TLS. We have a compiling option to disable them in openssl. I propose to make these curves disabled in compile time by default in 4.0.
See for more details https://github.com/openssl/openssl/pull/29658
Compile-time disable weak curves in TLS by default in 4.0
poll by Dmitry Belyavsky Closed Thu 22 Jan 2026 12:00PM
Results
| Results | Option | % of points | Voters | |||
|---|---|---|---|---|---|---|
| Yes | 100 | 8 |       | |||
| No | 0 | 0 | ||||
| Undecided | 31 |                |