Michael Ströder wrote:

HI!

Are there any plans to support TLS 1.3?

Which libraries implement it? We already have support for OpenSSL 1.1.

The 0-RTT feature could be a significant performance gain in case LDAP applications open a new TLS connection each time they check a password with a bind request.

Haven't seen it. Is it implemented server-side, client-side, or both? How is it different from existing session caching feature? Note that slapd supports session caching by default; libldap and clients require session caching to be explicitly enabled.