diff options
| author | Ben Noordhuis <info@bnoordhuis.nl> | 2012-08-21 22:27:13 +0200 |
|---|---|---|
| committer | Ben Noordhuis <info@bnoordhuis.nl> | 2012-08-21 22:27:13 +0200 |
| commit | badbd1af27f5f3fd07862b8ee7d0810e7ae9ef56 (patch) | |
| tree | 75d58772b7db876a79d2bb2599607cc18c6474f3 /deps/npm/html/doc/deprecate.html | |
| parent | 7c75ca7182872c95c798e192ed28c1c610b1024b (diff) | |
| download | node-new-badbd1af27f5f3fd07862b8ee7d0810e7ae9ef56.tar.gz | |
tls: update default cipher list
Update the default cipher list from RC4-SHA:AES128-SHA:AES256-SHA
to ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH
in order to mitigate BEAST attacks.
The documentation suggested AES256-SHA but unfortunately that's a CBC cipher
and therefore susceptible to attacks.
Fixes #3900.
Diffstat (limited to 'deps/npm/html/doc/deprecate.html')
0 files changed, 0 insertions, 0 deletions