rfc:improved-tls-defaults

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Last revisionBoth sides next revision
rfc:improved-tls-defaults [2014/02/17 05:10] rdlowreyrfc:improved-tls-defaults [2014/06/20 12:12] – Correct server_forward_secrecy anchor target daverandom
Line 4: Line 4:
   * Date: 2014-01-28   * Date: 2014-01-28
   * Author: Daniel Lowrey, rdlowrey@php.net   * Author: Daniel Lowrey, rdlowrey@php.net
-  * Status: Vote+  * Status: Implemented
   * First Published at: http://wiki.php.net/rfc/improved-tls-defaults   * First Published at: http://wiki.php.net/rfc/improved-tls-defaults
-  * Minor Revision (v0.1 → v0.2): 2014-01-28 
-  * Major Revision (v0.2 → v0.3): 2014-01-29 
-  * Minor Revision (v0.3 → v0.4): 2014-01-30 
-  * Minor Revision (v0.4 → v0.5): 2014-01-30 
-  * Major Revision (v0.5 → v0.6): 2014-02-01 
-  * Minor Revision (v0.6 → v0.7): 2014-02-02 
-  * Minor Revision (v0.7 → v0.8): 2014-02-03 
-  * Minor Revision (v0.8 → v0.9): 2014-02-06 
-  * Minor Revision (v0.9 → v0.10): 2014-02-11 
-  * Minor Revision (v0.10 → v0.11): 2014-02-16 
  
 ===== Introduction ===== ===== Introduction =====
Line 46: Line 36:
   * [[https://wiki.php.net/rfc/improved-tls-defaults#honor_cipher_order|Create "honor_cipher_order" context option]]   * [[https://wiki.php.net/rfc/improved-tls-defaults#honor_cipher_order|Create "honor_cipher_order" context option]]
   * [[https://wiki.php.net/rfc/improved-tls-defaults#expose_negotiated_values|Expose negotiated values]]   * [[https://wiki.php.net/rfc/improved-tls-defaults#expose_negotiated_values|Expose negotiated values]]
-  * [[https://wiki.php.net/rfc/improved-tls-defaults#servers_forward_secrecy|Server forward secrecy]]+  * [[https://wiki.php.net/rfc/improved-tls-defaults#server_forward_secrecy|Server forward secrecy]]
   * [[https://wiki.php.net/rfc/improved-tls-defaults#expose_default_cert_paths|Expose default cert paths]]   * [[https://wiki.php.net/rfc/improved-tls-defaults#expose_default_cert_paths|Expose default cert paths]]
   * [[https://wiki.php.net/rfc/improved-tls-defaults#stream_wrapper_creep|Allow fine-grained protocol selection flags]]   * [[https://wiki.php.net/rfc/improved-tls-defaults#stream_wrapper_creep|Allow fine-grained protocol selection flags]]
Line 76: Line 66:
 ''!ADH'' ''!ADH''
  
-  * Anonymous Diffie-Hellman ciphers disallowed as per [[http://www.ietf.org/rfc/rfc2246.txt|RFC2246 Section A.5]]+  * Anonymous Diffie-Hellman ciphers disallowed as per [[http://tools.ietf.org/html/rfc2246#appendix-A.5|RFC2246 Section A.5]]
  
 ''!RC4'' ''!RC4''
Line 639: Line 629:
  
   * Should PHP implement the recommendations in this proposal as part of 5.6?   * Should PHP implement the recommendations in this proposal as part of 5.6?
- 
-===== Patches and Tests ===== 
- 
-The proposed changes and tests are available here: 
  
 https://github.com/php/php-src/pull/593 https://github.com/php/php-src/pull/593
- 
-===== Implementation ===== 
- 
-TBD 
  
 ===== Vote ===== ===== Vote =====
Line 658: Line 640:
 of the RFC. They are noted here to avoid confusion. of the RFC. They are noted here to avoid confusion.
  
-<doodle title="Should the proposed TLS changes be merged for 5.6?" auth="rdlowrey" voteType="single" closed="false">+<doodle title="Should the proposed TLS changes be merged for 5.6?" auth="rdlowrey" voteType="single" closed="true">
    * Yes    * Yes
    * No    * No
Line 664: Line 646:
  
 Thanks for your time :) Thanks for your time :)
- 
-===== Rejected Features ===== 
- 
-TBD 
  
  
rfc/improved-tls-defaults.txt · Last modified: 2017/09/22 13:28 by 127.0.0.1