[issue23481] SSL module should not offer RC4 based cipher suites for clients by default

2015-02-19 Thread Antoine Pitrou
Antoine Pitrou added the comment: Sounds fine to me. Should a test be added? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue23481 ___ ___

[issue23481] SSL module should not offer RC4 based cipher suites for clients by default

2015-02-19 Thread Roundup Robot
Roundup Robot added the comment: New changeset c509e6f18d7d by Benjamin Peterson in branch '3.4': remove rc4 from the default client ciphers (closes #23481) https://hg.python.org/cpython/rev/c509e6f18d7d New changeset 3596081cfb55 by Benjamin Peterson in branch '2.7': remove rc4 from the

[issue23481] SSL module should not offer RC4 based cipher suites for clients by default

2015-02-18 Thread Alex Gaynor
New submission from Alex Gaynor: In addition to the security concerns, it is now a violation of RFC7465 to offer a cipher suite with RC4 in a ClientHello: https://tools.ietf.org/html/rfc7465 -- components: Library (Lib) files: rc4.diff keywords: patch messages: 236202 nosy: alex,

[issue23481] SSL module should not offer RC4 based cipher suites for clients by default

2015-02-18 Thread Ian Cordasco
Ian Cordasco added the comment: It's clearly no longer acceptable to include RC4 when the IETF has felt it necessary to publish an RFC prohibiting its usage. -- nosy: +icordasc ___ Python tracker rep...@bugs.python.org