Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Switch default TLS elliptic curve from P-521 to P-256. #1468

Merged
merged 1 commit into from
Jun 3, 2019
Merged

Switch default TLS elliptic curve from P-521 to P-256. #1468

merged 1 commit into from
Jun 3, 2019

Commits on Jun 3, 2019

  1. Switch default TLS elliptic curve from P-521 to P-256. 

    P-256 is implemented in constant time while P-521 is not, making it
more secure against side channel attacks.  In addition, this curve has
broader software support.  In particular, P-521 is unusable from
BoringSSL clients.
    @jrick
    jrick committed Jun 3, 2019
    Configuration menu
    Copy the full SHA
    6867c05 View commit details
    Browse the repository at this point in the history