[atlas] Probe TLS stack

Thanks for the info, Michel! There are a couple of interesting TLS features like hybrid key exchange and emerging standards like compact TLS (cTLS) and Encrypted Client Hello (ECH) that would benefit from knowing how “deployable” they are in practice. If probes could be upgraded and then controlled to enable these types of features, it could help the standardization process. Is there any way these types of probes could be supported? I certainly don’t know the update cadence for probes, though given that they’re currently capped at TLS 1.2 I suspect it’s something like “not often.” 

Best,
Chris

> On May 13, 2022, at 3:52 AM, Michel Stam <mstam at ripe.net> wrote:
> 
> Hello Christopher,
> 
> The probes use OpenSSL for the TLS stack, the exact features compiled in depend a little on the probe used, but right now the software will support up to TLS v1.2.
> 
> Is there any feature in particular you’re looking for?
> 
> Regards,
> 
> Michel
> 
>> On 12 May 2022, at 11:50, Christopher Wood <caw at heapingbits.net> wrote:
>> 
>> Hi folks,
>> 
>> Apologies in advance if the answer to this question is available online somewhere, but I’m wondering if anyone knows what TLS stack is used in Atlas probes, and in particular, what sort of TLS features are configurable by such probes.
>> 
>> Best,
>> Chris
>> -- 
>> ripe-atlas mailing list
>> ripe-atlas at ripe.net
>> https://mailman.ripe.net/
>