TLS1.3 in Node.js

This post details the integration of TLS 1.3 support into Node.js. It explains the prerequisite of updating to OpenSSL 1.1.1 and the subsequent work required to handle protocol-level differences in TLS 1.3, such as handshake variations, session ticket handling, and event timing. The post also highlights the security improvements of TLS 1.3, including assured forward secrecy, removal of RSA key agreement, a reduced and safer set of cipher suites, and the mandatory use of AEAD cipher modes.