New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
servo should negotiate more modern secure ciphersuites #8594
Labels
Comments
bors-servo
pushed a commit
that referenced
this issue
Nov 20, 2015
Fixed #8594 -- use a more modern default cipher suite list by default <!-- Reviewable:start --> [<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/servo/servo/8611) <!-- Reviewable:end -->
bors-servo
pushed a commit
that referenced
this issue
Nov 20, 2015
Fixed #8594 -- use a more modern default cipher suite list by default <!-- Reviewable:start --> [<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/servo/servo/8611) <!-- Reviewable:end -->
bors-servo
pushed a commit
that referenced
this issue
Nov 20, 2015
Fixed #8594 -- use a more modern default cipher suite list by default Fixes #8594. <!-- Reviewable:start --> [<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/servo/servo/8611) <!-- Reviewable:end -->
bors-servo
pushed a commit
that referenced
this issue
Nov 20, 2015
Fixed #8594 -- use a more modern default cipher suite list by default Fixes #8594. <!-- Reviewable:start --> [<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/servo/servo/8611) <!-- Reviewable:end -->
bors-servo
pushed a commit
that referenced
this issue
Nov 20, 2015
Fixed #8594 -- use a more modern default cipher suite list by default Fixes #8594. <!-- Reviewable:start --> [<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/servo/servo/8611) <!-- Reviewable:end -->
bors-servo
pushed a commit
that referenced
this issue
Nov 20, 2015
Fixed #8594 -- use a more modern default cipher suite list by default Fixes #8594. <!-- Reviewable:start --> [<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/servo/servo/8611) <!-- Reviewable:end -->
bors-servo
pushed a commit
that referenced
this issue
Nov 21, 2015
Fixed #8594 -- use a more modern default cipher suite list by default Fixes #8594. <!-- Reviewable:start --> [<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/servo/servo/8611) <!-- Reviewable:end -->
bors-servo
pushed a commit
that referenced
this issue
Nov 21, 2015
Fixed #8594 -- use a more modern default cipher suite list by default Fixes #8594. <!-- Reviewable:start --> [<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/servo/servo/8611) <!-- Reviewable:end -->
bors-servo
pushed a commit
that referenced
this issue
Nov 21, 2015
Fixed #8594 -- use a more modern default cipher suite list by default Fixes #8594. <!-- Reviewable:start --> [<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/servo/servo/8611) <!-- Reviewable:end -->
bors-servo
pushed a commit
that referenced
this issue
Nov 21, 2015
Fixed #8594 -- use a more modern default cipher suite list by default Fixes #8594. <!-- Reviewable:start --> [<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/servo/servo/8611) <!-- Reviewable:end -->
paulrouget
pushed a commit
to paulrouget/servo
that referenced
this issue
Nov 25, 2015
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Right now servo appears to use OpenSSL's defaults, which are very bad. It should use a modern ciphersuite string such as https://github.com/python/cpython/blob/master/Lib/ssl.py#L168-L172
You can see the list it's sending at https://howsmyssl.com
The text was updated successfully, but these errors were encountered: