Re: Improved TLS Defaults

On Sat, Feb 1, 2014 at 7:27 PM, Pádraic Brady wrote: > it's clear that choosing a cipher suite is not an easy task. I agree that choosing exactly the right cipher order is a difficult (and not entirely objective) decision. Much like maintaining our own CA certs, I think it's probably best to delegate such decisions to people who sit around and think about them all day. I would prefer to re-use the current Mozilla recommendation with the addition that RC4 suites are disabled and will make this change to the RFC. > it removes all ciphers below 128 This is a pretty standard demarcation line these days. I don't personally have an issue with using 128-bit cipher key-lengths as the cut-off line. Also, remember that users always have the option to specify their own explicit cipher list should the need arise. I think that if 128-bit cipher use is ubiquitous enough for mainstream browsers (where users would be upset if they couldn't connect to their favorite sites) then it should be fine as a (configurable) default PHP setting. Cheers, Daniel