[Pkg-openssl-devel] Bug#778747: Bug#778747: Bug#778747: openssl: RFC 7465 says RC4 is broken, never to be used

Diederik de Haas didi.debian at cknow.org
Sat May 2 23:37:16 UTC 2015


On Sat, 21 Feb 2015 10:49:21 +0100 Kurt Roeckx <kurt at roeckx.be> wrote:
> If you just change it to prefer the default server ordering you
> should already have a decent list, but it prefers AES256 over
> AES128 while there is no need for that.

AFAICT EFF disagrees: 
https://www.eff.org/deeplinks/2015/04/effs-updated-ssl-configuration

-- 
GPG: 0x138E41915C7EFED6
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-openssl-devel/attachments/20150503/68070090/attachment.sig>


More information about the Pkg-openssl-devel mailing list