Comment 38 for bug 1709193

Regarding regressions: I believe that the "soak testing" of the fix in stretch and zesty gives a reasonable indication that this works fine for normal users (or nobody uses it...). There can be regressions of course, but this essentially makes the behaviour of the compat bindings equivalent to the normal gnutls behaviour.

In any case, regressions could happen for TLS 1.0 servers. That said, any regression should be very limited considering that servers often do not negotiate that any more and that TLS 1.0 is horribly insecure.