[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #19998 [Core Tor/Tor]: Stop allowing 3DES in TLS ciphersuites

#19998: Stop allowing 3DES in TLS ciphersuites
--------------------------+------------------------------------
 Reporter:  nickm         |          Owner:
     Type:  defect        |         Status:  new
 Priority:  Medium        |      Milestone:  Tor: 0.2.9.x-final
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:  tor-spec      |  Actual Points:
Parent ID:                |         Points:  .2
 Reviewer:                |        Sponsor:
--------------------------+------------------------------------

Comment (by nickm):

 AFAICT the RC4 suites are no longer advertised or accepted by any
 supported Tor. The only reason our code still mentions "RC4" is to detect
 versions of the cipher list that are lies.

 So yeah, adding to our spec "no RC4 either" would be a fine thing!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19998#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs