wolfbeast
63045af8a2
Disable TLS 1.3 by default for now until our NSS can be updated to the latest spec.
2019-02-15 23:50:30 +08:00
wolfbeast
43fe9261ea
Activate TLS 1.3 by default.
...
This resolves #15 .
2019-02-15 23:33:55 +08:00
wolfbeast
fbac02fc06
Disable static DHE + AES suites by default (common combination for weak DH keys)
...
Issue #4 point 5
2019-02-14 14:28:32 +08:00
wolfbeast
504e1d12bb
Disable 3DES cipher by default + re-order a few things.
...
Issue #4 point 4
2019-02-14 14:28:30 +08:00
wolfbeast
05d35d3d18
Add RSA-AES + SHA256/384 suites for web compatibility.
...
Sites with these ciphers (commonly IIS) would otherwise fall back to weak 3DES that will be disabled by default.
Issue #4 points 2 and 3
2019-02-14 14:28:29 +08:00
wolfbeast
3ecea693f6
Add Camellia to the active cipher suites.
...
Issue #4 point 1.
Camellia is a strong, modern, safe cipher with no known weaknesses or reduced strength attacks.
The cipher has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.
2019-02-14 14:28:27 +08:00
Roy Tam
dcd9973243
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
2018-01-19 03:59:58 +08:00
