django-afip icon indicating copy to clipboard operation
django-afip copied to clipboard

Drop hack required for AFIP's insecure DH ciphers

Open WhyNotHugo opened this issue 2 years ago • 0 comments

Many months back AFIP made changes to their servers which resulted in substandard security (particularly, they switched to using only insecure cyphers).

Regrettably, they seemed incapable (or unwilling) to understand and fix the issue, so we added a hack to enable establishing insecure connections. With their recent changes to upgrade the used TLS version, it's possible they've also fixed this (I definitely hope so).

If I recall correctly, the security downgrade only applied to production, so this also needs to be tested in production before being merged.

WhyNotHugo avatar Jan 06 '22 14:01 WhyNotHugo