[tor-bugs] #11528 [Tor]: Consider using SSL_OP_CIPHER_SERVER_PREFERENCE
Tor Bug Tracker & Wiki
blackhole at torproject.org
Fri Apr 25 08:22:35 UTC 2014
#11528: Consider using SSL_OP_CIPHER_SERVER_PREFERENCE
-------------------------+-------------------------------------------------
Reporter: nickm | Owner:
Type: defect | Status: needs_review
Priority: normal | Milestone: Tor: 0.2.4.x-final
Component: Tor | Version:
Resolution: | Keywords: tor-relay tls 024-backport nickm-
Actual Points: | review-0254
Points: | Parent ID:
-------------------------+-------------------------------------------------
Comment (by nickm):
Recommendation: backport along with other TLS ciphersuite improvements.
Anything that can ever make users stick on DHE1024 instead of ECDHE is a
security bug we should fix IMO
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11528#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list