1
0
Fork 0
mirror of https://github.com/miniflux/v2.git synced 2025-06-27 16:36:00 +00:00
miniflux-v2/internal/http
jvoisin 3ab9ca9e4d refactor(http): Don't hardcode TLS configuration
- TLS 1.2 is used as MinVersion by default
- With regard to CipherSuites, in Go 1.22 RSA key exchange based cipher suites
  were removed from the default list, and in Go 1.23 3DES cipher suites were
  removed as well. Ciphers for TLS1.3 aren't configurable.
- No need to specify CurveP25, as the servers will likely disable the weird
  ones like CurveP384 and CurveP521. Removing the explicit specification also
  enables the post-quantum X25519MLKEM768, wow!

I trust the go team to make better choices on the long term than us keeping
miniflux up to date with the latest TLS trend.
2025-06-18 20:12:55 -07:00
..
cookie Make cookie duration dependent on configuration 2024-05-01 19:34:13 -07:00
request feat(integration)!: remove Pocket integration 2025-06-15 13:29:55 -07:00
response feat(response): change error response content type to plain text and escape HTML 2025-05-11 19:15:54 -07:00
route Implement structured logging using log/slog package 2023-09-24 22:37:33 -07:00
server refactor(http): Don't hardcode TLS configuration 2025-06-18 20:12:55 -07:00