e4f0d12b2c
Enable AES256-GCM for accessibility to overly-strict sites that do not offer ChaCha20.
2018-07-25 06:50:59 +08:00
348757ed67
Extend {EnabledWeakCiphers} bit field to allow more cipher suites.
2018-07-25 06:50:53 +08:00
36fc143339
Add AES256-GCM suites to secmanager.
...
Disabled by default for known wasted performance (40%) on a suite weaker to key attacks than AES128.
2018-07-25 06:50:51 +08:00
8df1603dfd
Enable ChaCha20-Poly1305 suites.
2018-07-25 06:50:49 +08:00
5546cc421e
Temporarily disable Camellia-GCM suites in secmanager.
2018-07-25 06:50:45 +08:00
131363dc30
Fix SSL status ambiguity.
...
- Adds CipherSuite string with the full suite
- Changes CipherName to be the actual cipher name instead of the (erroneous) full suite like Firefox does.
This is a reimplementation of 811ce3ff4939b7ece26ad5f99878fc58b92edf7c for Tycho.
2018-07-25 00:55:11 +08:00
edcc56de80
Hook up less common cipher suites + move RC4 to disabled section.
2018-07-24 23:11:55 +08:00
f1ad132236
Update TLS intolerant fallback handling:
...
- Disable false starts
- Disable fallback to RC4
- Update whitelist that should override the default for insecure fallbacks
2018-07-24 23:11:55 +08:00
e52817d90a
Security: Hook up Camellia ciphers, disable RC4.
2018-07-24 23:11:54 +08:00
5ee6187aad
Prep tree for forward-porting Goanna, stage 1
2018-07-24 23:10:50 +08:00
baf46a6bf1
Merge pull request #1 from mozilla/esr38: Esr38 upstream pull
2018-07-24 23:04:07 +08:00
Pale Moon
wolfbeast
Moonchild