Re: Improved TLS Defaults
On Sat, Feb 1, 2014 at 7:27 PM, Pádraic Brady wrote:
> it's clear that choosing a cipher suite is not an easy task.
I agree that choosing exactly the right cipher order is a difficult (and
not entirely objective) decision. Much like maintaining our own CA certs, I
think it's probably best to delegate such decisions to people who sit
around and think about them all day. I would prefer to re-use the current
Mozilla recommendation with the addition that RC4 suites are disabled and
will make this change to the RFC.
> it removes all ciphers below 128
This is a pretty standard demarcation line these days. I don't personally
have an issue with using 128-bit cipher key-lengths as the cut-off line.
Also, remember that users always have the option to specify their own
explicit cipher list should the need arise. I think that if 128-bit cipher
use is ubiquitous enough for mainstream browsers (where users would be
upset if they couldn't connect to their favorite sites) then it should be
fine as a (configurable) default PHP setting.
Cheers,
Daniel
Thread (19 messages)