<p>We really appreciate the work done on the TLS settings in relayd(8) and httpd(8).</p><p>It makes it even easier to get a tried and tested secure connection to your favorite OS and service!</p><p>&quot;Both relayd(8) and httpd(8) now have the &quot;secure&quot; list of allowed crypto methods for HTTPS, which include TLSv1.3 and the TLSv1.2 AEAD cipher suites.</p><p>The previous list was &quot;HIGH:!aNULL&quot; which contain non-perfect-forward-security methods and this change may cause old clients to not be able to connect.&quot;</p><p>Source: <a href="https://undeadly.org/cgi?action=article;sid=20260629165750" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="ellipsis">undeadly.org/cgi?action=articl</span><span class="invisible">e;sid=20260629165750</span></a></p><p>Hat Tip to <span class="h-card" translate="no"><a href="https://bsd.network/@sizeofvoid" class="u-url mention">@<span>sizeofvoid</span></a></span> and others!</p><p><a href="https://mastodon.bsd.cafe/tags/RUNBSD" class="mention hashtag" rel="tag">#<span>RUNBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/OpenBSD" class="mention hashtag" rel="tag">#<span>OpenBSD</span></a></p>