consider not permitting RC4 on back channel queries

Description

Now that RFC 7465 "Prohibiting RC4 Cipher Suites" has been published (as PROPOSED STANDARD):

https://tools.ietf.org/html/rfc7465

... we should probably consider whether the SP's TLS client should be altered to comply:

o TLS clients MUST NOT include RC4 cipher suites in the ClientHello
message.

Environment

None

Activity

Show:

Scott Cantor February 25, 2015 at 3:55 PM

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Created February 25, 2015 at 11:56 AM
Updated March 20, 2015 at 1:12 AM
Resolved February 25, 2015 at 3:55 PM