• Donald Stufft's avatar
    Issue #20995: Enhance default ciphers used by the ssl module · 79ccaa2c
    Donald Stufft yazdı
    Closes #20995 by Enabling better security by prioritizing ciphers
    such that:
    
    * Prefer cipher suites that offer perfect forward secrecy (DHE/ECDHE)
    * Prefer ECDHE over DHE for better performance
    * Prefer any AES-GCM over any AES-CBC for better performance and security
    * Then Use HIGH cipher suites as a fallback
    * Then Use 3DES as fallback which is secure but slow
    * Finally use RC4 as a fallback which is problematic but needed for
      compatibility some times.
    * Disable NULL authentication, NULL encryption, and MD5 MACs for security
      reasons
    79ccaa2c
ssl.py 33 KB