]> Cypherpunks repositories - gostls13.git/commit
crypto/tls: disable RC4 by default.
authorAdam Langley <agl@golang.org>
Tue, 17 Mar 2015 00:13:10 +0000 (17:13 -0700)
committerAdam Langley <agl@golang.org>
Wed, 18 Mar 2015 00:38:14 +0000 (00:38 +0000)
commitd26fdf295ed1f0154f65110b17ac6ecf4300dad4
treec361f6f1461656a0d4457aff0a18423a9d2e55c2
parenta432568300e1432c3a49d80b48900411589a816d
crypto/tls: disable RC4 by default.

RC4 is frowned upon[1] at this point and major providers are disabling it
by default[2].

Those who still need RC4 support in crypto/tls can enable it by
specifying the CipherSuites slice in crypto/tls.Config explicitly.

Fixes #10094.

[1] https://tools.ietf.org/html/rfc7465
[2] https://blog.cloudflare.com/killing-rc4-the-long-goodbye/

Change-Id: Ia03a456f7e7a4362b706392b0e3c4cc93ce06f9f
Reviewed-on: https://go-review.googlesource.com/7647
Reviewed-by: Andrew Gerrand <adg@golang.org>
src/crypto/tls/cipher_suites.go
src/crypto/tls/common.go
src/crypto/tls/handshake_server_test.go