Skip to content
Snippets Groups Projects
Commit b9300629 authored by Adrien Béraud's avatar Adrien Béraud Committed by Guillaume Roguez
Browse files

security: use better PFS priority string

This patch changes the TLS priority string to remove RSA key-exchange
algorithms from current cipher suites (based on SECURE192).

This let DH key-exchange the only remaining algorithms.
Notice that we use a minimal of 2048-bits DH params
by using GNUTLS_SEC_PARAM_NORMAL settings
in the gnutls_sec_param_to_pk_bits function.

Using this priority makes audio and video calls forward secure,
a significant security and privacy feature for Ring users.

Tuleap: #383
Change-Id: Iabf51bb52617354c34410d15ee96e0be90acee55
parent c8f451e4
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment