After 1.0.2 goes out, we should move any cipher that uses RC4 and MD5 from MEDIUM to LOW. Coupled with ticket 3231, this means that the DEFAULT configuration will not use any 'bad' ciphers and that things like single-DES or RC4 will have to be explicitly enabled by default. This follows the IETF TLS best practices RFC. -- Rich Salz, OpenSSL dev team; [email protected]
______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
