Howdy,

Here are two fresh (and annoying) issues we need to fix:

#1323 - remove export cipher suites from OpenSSL preference list
  https://sourceforge.net/p/curl/bugs/1323/

#1324 - curl built with SecureTransport includes support for NULL ciphersuites
         in ClientHello
  https://sourceforge.net/p/curl/bugs/1324/

Left to do is then to build curl with other TLS backends and try it against
https://www.howsmyssl.com/a/check to see if there are more flaws in this
style.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html