On Thu, 30 Dec 2021 15:56:02 +0800 M K Saravanan <[email protected]> wrote:
> Does anyone know whether any ECDHE based cipher suites were added for > SEED for TLS? I don't know what the background for this request is, but I'd like to point out that we had similar discussions in the past about obscure ciphers (look for brainpool curves) in the past. This is my personal opinion, but I think it is widely shared among many in the community: It used to be that the TLS community valued supporting as many ciphers as possible. But this has more or less ended with TLS 1.3, which is part of a larger realization in IT security that unnecessary complexity is usually bad and should be avoided. Instead the trend is to support a small set of algorithms that are generally considered "okay-ish" (there are always minor ups and downs of certain cipher choices) and leave it with that and not seek to support a wide variety of algorithms. I'd oppose any specification of new cipher suites without a good justification, and I think this is an opinion many here share. -- Hanno Böck https://hboeck.de/ _______________________________________________ TLS mailing list [email protected] https://www.ietf.org/mailman/listinfo/tls
