Re: Remove Legacy TLS Ciphersuites from Initial Handshake by Default

2015-02-27 Thread Kosuke Kaizuka
On 2015/02/28 10:03, nellie.pet...@safe-mail.net wrote: > I propose removal of the following ciphersuite: > > 0032 TLS_DHE_DSS_WITH_AES_128_CBC_SHA > > because DSS (the non-EC version) is obsolete, and based on preliminary > telemetry and Pulse data is not being negotiated at all with any serve

Remove Legacy TLS Ciphersuites from Initial Handshake by Default

2015-02-27 Thread nellie . petrie
I am using Marlene Pratt's "Proposal to Remove legacy TLS Ciphersuits Offered by Firefox" from 13 Dec 2013 on dev-tech-crypto mailing list as a guideline. I present a proposal to remove some legacy ciphersuites from the initial handshake presented by Firefox. In Firefox 36, we have removed RC4