Skip to content
This repository has been archived by the owner on Nov 6, 2023. It is now read-only.

Update Cipher List for Pending Fetch Test #18964

Merged
merged 3 commits into from
Mar 9, 2020

Conversation

zoracon
Copy link
Contributor

@zoracon zoracon commented Feb 20, 2020

Updating cipher suite to TLS 1.2 for March Fetch Test

TLS 1.0., 1.1 complete deprecation in both Chrome and Firefox roll out in March

Related PR:
#18700

Related Issue:
#18866

@J0WI
Copy link
Contributor

J0WI commented Feb 21, 2020

The current versions of ESR/Tor are still supporting TLS 1.0, 3DES an CBC ciphers.

@pipboy96
Copy link
Contributor

@J0WI We need to test for intersection of supported browsers' cipher lists, so even if only Chrome removed TLS 1.0, 3DES or CBC ciphers, we would have to disable it anyway.

@pipboy96
Copy link
Contributor

pipboy96 commented Mar 2, 2020

@J0WI Should we replicate this behavior by making a connection without 3DES support and if if fails, making another with 3DES support enabled?

@J0WI
Copy link
Contributor

J0WI commented Mar 2, 2020

I think we should just keep it in the cipher list until it's disabled by default in browsers.

@zoracon zoracon merged commit 1ba3d77 into EFForg:master Mar 9, 2020
@zoracon zoracon deleted the fetch-test-update-ciphers branch March 9, 2020 23:45
zoracon added a commit that referenced this pull request Mar 24, 2020
zoracon added a commit that referenced this pull request Mar 24, 2020
* Revert "Update Cipher List for Pending Fetch Test (#18964)"

This reverts commit 1ba3d77.

* Add back relevent and up to date comments
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants