[issue27850] Remove 3DES from cipher list (sweet32 CVE-2016-2183)
Donald Stufft
report at bugs.python.org
Wed Aug 24 10:23:03 EDT 2016
Donald Stufft added the comment:
Should we also remove HIGH from the cipher list? If I recall, at the time we added it under the assumption that we might get new, better ciphers automatically but 3DES is considered "HIGH", so we'll get it pulled in via that on older OpenSSLs.
----------
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue27850>
_______________________________________
More information about the Python-bugs-list
mailing list