Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update cipher suites for February 2019 #3865

Closed
swankjesse opened this issue Feb 19, 2018 · 2 comments
Closed

Update cipher suites for February 2019 #3865

swankjesse opened this issue Feb 19, 2018 · 2 comments
Labels
enhancement Feature not a bug
Milestone
3.14

Comments

@swankjesse
Copy link
Collaborator

We most recently updated the cipher suites in February 2018. We should update 'em again in February 2019.

When that's done, please open another tracking bug to update cipher suites in February 2020!
@swankjesse swankjesse added this to the 3.11 milestone Feb 19, 2018
@swankjesse swankjesse added the enhancement Feature not a bug label Feb 19, 2018
@swankjesse
Copy link
Collaborator Author

One recommendation from an infosec person at Square:

“If I were picking the ciphers, I would drop the SHA1 ciphers (#6, #7, #10, #11) and the 3DES one too (#12).”

@swankjesse swankjesse modified the milestones: Backlog, 3.14 Feb 19, 2019
swankjesse pushed a commit that referenced this issue Feb 24, 2019
@squarejesse
Remove default cipher suites: TLS_AES_128_CCM_SHA256, TLS_AES_128_CCM…
98b9033 
…_8_SHA256

As far as I know we never would have used these anyway, as they're
not available on Android, Java, or Conscrypt.

They aren't enabled by default in either Firefox or Chrome.

Closes: #3865
@swankjesse swankjesse mentioned this issue Feb 24, 2019
Merged
@swankjesse
Copy link
Collaborator Author

Next: #4655

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement Feature not a bug
Projects
None yet
Milestone
3.14
Development

No branches or pull requests
1 participant
@swankjesse