Switch to dtls 1.2 about freelan HOT 2 OPEN

No worries: you are definitely right that security is a complex topic, and that relying on existing standards and implementations IS a good thing.

The main problem I had with DTLS was the presence of memory leaks and the fact that it was too client-server oriented. It was very difficult to get the SSL handshake to complete by both sides when they reach out to each other simultaneously (and for peer-to-peer software, we have to assume that this will happen).

I'm setting the freelan 3.0 milestone on this, but this obviously won't happen "soon". I hope they will have fixed the issues I just mentioned by then.

Fun fact: not relying on OpenSSL's DTLS so far caused Freelan to be immune to Heartbleed, which is kinda cool ! That's not a long term valid point of course, but I was quite happy it didn't affect us.

from freelan.

Also one of the cool things would be the ability to switch easily between all possible cyphers, and really use "cipher_capability"

from freelan.