Skip to content

Commit 41b1def

Browse files
committed
doc: TLS TL;DR bug discalmer
1 parent 266b0cf commit 41b1def

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

doc/godebug.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -217,6 +217,8 @@ field by default.
217217
Go 1.24 enabled the post-quantum key exchange mechanism
218218
X25519MLKEM768 by default. The default can be reverted using the
219219
[`tlsmlkem` setting](/pkg/crypto/tls/#Config.CurvePreferences).
220+
This is can be useful when dealing with legacy TLS servers that do not handle large records correctly,
221+
causing a timeout during the handshake (bug known as [TLS post-quantum TL;DR fail](https://tldr.fail/)).
220222
Go 1.24 also removed X25519Kyber768Draft00 and the Go 1.23 `tlskyber` setting.
221223

222224
Go 1.24 made [`ParsePKCS1PrivateKey`](/pkg/crypto/x509/#ParsePKCS1PrivateKey)
@@ -253,6 +255,8 @@ Previous versions default to `winreadlinkvolume=0`.
253255
Go 1.23 enabled the experimental post-quantum key exchange mechanism
254256
X25519Kyber768Draft00 by default. The default can be reverted using the
255257
[`tlskyber` setting](/pkg/crypto/tls/#Config.CurvePreferences).
258+
This is can be useful when dealing with legacy TLS servers that do not handle large records correctly,
259+
causing a timeout during the handshake (bug known as [TLS post-quantum TL;DR fail](https://tldr.fail/)).
256260

257261
Go 1.23 changed the behavior of
258262
[crypto/x509.ParseCertificate](/pkg/crypto/x509/#ParseCertificate) to reject

0 commit comments

Comments
 (0)