Re: [PATCH] secur32/schannel: diabled TLS1.1/1.2 by Default

[Marcus Meissner]

On Mon, Sep 10, 2012 at 12:14:51AM +0900, Hiroshi Miura wrote:
> -Set TLS1.1/1.2 disabled by Default that is
>     same as Windows 7 default.
> See registry entry for schannel and control
> enable/disable tls versions.
>
> It also see grbitEnabledProtocols defined in
> credentials that take precedence over registry.

I think the regression issue with TLS 1.1/1.2 is the "empty fragments"
sending, right?

Perhaps we can just disable that and not all of TLS 1.1/1.2?

Ciao, Marcus