Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Re-enable dhe_rsa_(camellia|aes)_256_sha ciphers at some point #19

Closed
pyllyukko opened this issue May 21, 2015 · 2 comments
Closed

Re-enable dhe_rsa_(camellia|aes)_256_sha ciphers at some point #19

pyllyukko opened this issue May 21, 2015 · 2 comments

Comments

@pyllyukko
Copy link
Owner

pyllyukko commented May 21, 2015

These two cipher suites were disabled in #18 due to the LogJam vulnerability. As they still have the forward secrecy property, it might be good idea to re-enable them at some point in the future.

Related:

  • RFC 5932 (Camellia Cipher Suites for TLS)
@pyllyukko
Copy link
Owner Author

Maybe these cipher suites should be forgotten in favor of TLSv1.[23], which seem to use only cipher suites with SHA-2 signature algorithms.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants
@pyllyukko and others