CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2015/02/22 07:50:41
Modified files:
lib/libtls : tls_config.c tls_internal.h
Log message:
In the interests of being secure by default, make the default TLS ciphers
be those that are TLSv1.2 with AEAD and PFS. Provide a "compat" mode that
allows the previous default ciphers to be selected.
Discussed with tedu@ during s2k15.
