ice icon indicating copy to clipboard operation
ice copied to clipboard

Published 20 hours ago • verified publisher icon zeroc-ice

Review IceSSL protocol defaults

Open externl opened this issue 5 years ago • 1 comments

We should review our IceSSL protocol defaults. We bake in (as of 3.7.1) defaults instead of using platform defaults. In the past this was because SSLv3 as still enabled by default on many platforms.

If we move back to using system defaults it would maybe resolve future issues with new protocols such as https://github.com/zeroc-ice/ice/issues/330.

If we keep using our own defaults we should remove TLSv1.0, as it's no longer recommended for use.

externl avatar Jan 14 '19 19:01 externl

For C# using SsslProtocols.None will allow IceSSL negotiate the connection using system defaults

pepone avatar Jan 15 '19 17:01 pepone