Skip to content

ssl:// internet domain description outdated #5081

@sbossertfire

Description

@sbossertfire

Affected page

https://php.net/transports.inet

Current issue

ssl:// will attempt to negotiate an SSL V2, or SSL V3 connection depending on the capabilities and preferences of the remote host. sslv2:// and sslv3:// will select the SSL V2 or SSL V3 protocol explicitly.

The ssl:// description is outdated and misleading, and the sslv2:// and sslv3:// should probably be fully removed.

https://wiki.php.net/rfc/improved-tls-defaults

Suggested improvement

ssl:// will attempt to negotiate an SSL/TLS connection depending on the capabilities and preferences of the client and remote host.

Since the available protocols also must be available to the client, e.g. through stream_context_create(['ssl' => ['crypto_method' => $protocols]])

Additional context (optional)

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions