Jim Perrin wrote:
I'd like to see server and browsers supporting RFC 2817 also, but I seem to rememeber that when it was raised on Mozilla's bugzilla there wasn't much support for it... and there are issues with is, see discussion of it on the Apache site [1]:
- Upgrading to TLS Within HTTP/1.1 http://www.ietf.org/rfc/rfc2817.txt
There is mod_gnutls for apache from the folks at outoforder.cc,
gnutls seems to hava a massive problem with random number sources - afair they *do* use /dev/random exclusively, which will block pretty fast if used on a server having a little bit more traffic.
Ralph