Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No warning or indication is given when the server is using RC4 protocol #28

Open
mmcclenn opened this issue Apr 1, 2016 · 0 comments
Open

Comments

@mmcclenn
Copy link

mmcclenn commented Apr 1, 2016

Now that the RC4 cipher has been deprecated, this module should at minimum give some kind of warning when a connection is made to a server that uses this cipher.

Even better would be to refuse any connection using this cipher by default. An option could be added to ssl_options, something like { allow_rc4 => 1 } for people who absolutely insist on continuing to use it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant