[issue27850] Remove 3DES from cipher list (sweet32 CVE-2016-2183)

Donald Stufft report at bugs.python.org
Wed Aug 24 10:23:03 EDT 2016


Donald Stufft added the comment:

Should we also remove HIGH from the cipher list? If I recall, at the time we added it under the assumption that we might get new, better ciphers automatically but 3DES is considered "HIGH", so we'll get it pulled in via that on older OpenSSLs.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue27850>
_______________________________________


More information about the Python-bugs-list mailing list