diff options
| author | Pale Moon <git-repo@palemoon.org> | 2017-05-29 03:06:03 +0200 |
|---|---|---|
| committer | Pale Moon <git-repo@palemoon.org> | 2017-05-29 03:06:03 +0200 |
| commit | 3662658b10571df9981125a23ec4901deb1a9b03 (patch) | |
| tree | cab6ddb4544a5626d5f92c4a90b98bffd793afb3 /netwerk | |
| parent | 0f6532702f3fdf50024903b5e369621089e5cb92 (diff) | |
| download | palemoon-gre-3662658b10571df9981125a23ec4901deb1a9b03.tar.gz | |
Enable Camellia FS cipher suites by default.
Exception to the DHE rule because of lack of ECDHE for Camellia in NSS, offering Forward Secrecy with Camellia that would otherwise not be possible.
Diffstat (limited to 'netwerk')
| -rw-r--r-- | netwerk/base/security-prefs.js | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/netwerk/base/security-prefs.js b/netwerk/base/security-prefs.js index 0447591a5..b787297ae 100644 --- a/netwerk/base/security-prefs.js +++ b/netwerk/base/security-prefs.js @@ -36,6 +36,8 @@ pref("security.ssl3.ecdhe_rsa_aes_128_sha", true); pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", true); pref("security.ssl3.ecdhe_rsa_aes_256_sha", true); pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", true); +pref("security.ssl3.dhe_rsa_camellia_128_sha", true); //FS Camellia +pref("security.ssl3.dhe_rsa_camellia_256_sha", true); //FS Camellia pref("security.ssl3.rsa_aes_256_gcm_sha384", true); pref("security.ssl3.rsa_aes_256_sha256", true); pref("security.ssl3.rsa_aes_128_gcm_sha256", false); @@ -56,9 +58,7 @@ pref("security.ssl3.dhe_dss_camellia_128_sha", false); //DHE+DSS pref("security.ssl3.dhe_dss_aes_128_sha", false); //DHE+DSS pref("security.ssl3.dhe_dss_aes_256_sha", false); //DHE+DSS pref("security.ssl3.dhe_rsa_aes_128_sha", false); //DHE+RSA -pref("security.ssl3.dhe_rsa_camellia_128_sha", false); //DHE+RSA pref("security.ssl3.dhe_rsa_aes_256_sha", false); //DHE+RSA -pref("security.ssl3.dhe_rsa_camellia_256_sha", false); //DHE+RSA pref("security.ssl3.ecdh_ecdsa_aes_256_sha", false); //Non-ephemeral pref("security.ssl3.ecdh_ecdsa_aes_128_sha", false); //Non-ephemeral pref("security.ssl3.ecdh_ecdsa_des_ede3_sha", false); //Non-ephemeral,3DES |