gecko-dev/security/manager
Dana Keeler 3b68845290 Bug 1724072 - allow enabling 3DES only when deprecated versions of TLS are enabled r=rmf
Chrome has removed 3DES completely[0], but we're still seeing some uses of it
in telemetry. Our assumption is that this is either due to old devices that
can't be upgraded, and hence probably use TLS 1.0, or servers that bafflingly
choose 3DES when there are other, better, ciphersuites in common.
This patch allows 3DES to only be enabled when deprecated versions of TLS are
enabled. This should protect users against the latter case (where 3DES is
unnecessary) while allowing them to use it in the former case (where it may be
necessary).

NB: The only 3DES ciphersuite gecko makes possible to enable is
TLS_RSA_WITH_3DES_EDE_CBC_SHA. This patch also changes the preference
corresponding to this ciphersuite from "security.ssl3.rsa_des_ede3_sha" to
"security.ssl3.deprecated.rsa_des_ede3_sha".

[0] https://www.chromestatus.com/feature/6678134168485888

Differential Revision: https://phabricator.services.mozilla.com/D121797
2021-08-24 01:25:07 +00:00
..
locales Bug 1718844 - handle certificates not being available in the remembered client authentication decision dialog r=rmf,fluent-reviewers 2021-07-15 21:47:39 +00:00
pki Bug 1718844 - handle certificates not being available in the remembered client authentication decision dialog r=rmf,fluent-reviewers 2021-07-15 21:47:39 +00:00
ssl Bug 1724072 - allow enabling 3DES only when deprecated versions of TLS are enabled r=rmf 2021-08-24 01:25:07 +00:00
tools Bug 1696251 - Replace self with command_context where possible in existing mach commands. r=mhentges,webdriver-reviewers,perftest-reviewers,whimboo 2021-07-19 16:04:25 +00:00
android_stub.h
moz.build