Intent to remove DHE ciphers in Fx 64 (Was: Intent to remove DHE ciphers from WebRTC DTLS handshake)

2018-10-06 Thread Nils Ohlmeier
As the Telemetry data [1] shows no significant usage of the DHE ciphers in Beta 63 and Nightly 64 we are planing to remove the DHE ciphers in Firefox 65. Please voice your concerns now, if you have any. Best Nils Ohlmeier [1] https://telemetry.mozilla.org/new-pipeline/dist.html#!cumulative=0

Re: Intent to remove DHE ciphers from WebRTC DTLS handshake

2018-08-31 Thread Nicholas Alexander
On Thu, Aug 30, 2018 at 2:15 PM, Nicholas Alexander wrote: > > > On Wed, Aug 29, 2018 at 3:56 PM, Nils Ohlmeier > wrote: > >> Summary: >> >> We are looking at removing the DHE cipher suites from the DTLS handshake >> in Firefox soon. >> >> Ciphers: >> - TLS_DHE_RSA_WITH_AES_128_CBC_SHA >> - TLS_

Re: Intent to remove DHE ciphers from WebRTC DTLS handshake

2018-08-30 Thread Nicholas Alexander
On Wed, Aug 29, 2018 at 3:56 PM, Nils Ohlmeier wrote: > Summary: > > We are looking at removing the DHE cipher suites from the DTLS handshake > in Firefox soon. > > Ciphers: > - TLS_DHE_RSA_WITH_AES_128_CBC_SHA > - TLS_DHE_RSA_WITH_AES_256_CBC_SHA > are the two suites which we want to remove, be

Intent to remove DHE ciphers from WebRTC DTLS handshake

2018-08-29 Thread Nils Ohlmeier
Summary: We are looking at removing the DHE cipher suites from the DTLS handshake in Firefox soon. Ciphers: - TLS_DHE_RSA_WITH_AES_128_CBC_SHA - TLS_DHE_RSA_WITH_AES_256_CBC_SHA are the two suites which we want to remove, because they are considered too weak. A Telemetry probe landed in Firef