mirror of
git://git.sv.gnu.org/emacs.git
synced 2026-01-28 07:50:48 -08:00
d2830c9f31
The previous default was to warn when servers supported only 1024 bit primes in Diffie-Hellman key exchanges. This highly conservative number was based on the observation that, in November 2018, no less than 12.7% of servers still only supported 1024 bit primes (less than 0.1% supported only 768 and 512 bits). Five years later, in October 2023, only 3.7 % of servers remain with only 1024 bit support. SSL Labs summarizes: "At this time, 2048 bits is the minimum expected strength." Therefore, it is reasonable to start warning users about this in Emacs 30.1, at which time even fewer servers with such poor capabilities will remain. Note that key exchanges based on 1024 bit prime number were considered broken for security purposes already in 2015 (see Logjam below). For more information: https://www.ssllabs.com/ssl-pulse/ https://en.wikipedia.org/wiki/Logjam_(computer_security) * lisp/net/nsm.el (nsm-protocol-check--dhe-prime-kx): Bump expected minimum number of prime bits to 2048. |
||
|---|---|---|
| .. | ||
| ange-ftp.el | ||
| browse-url.el | ||
| dbus.el | ||
| dictionary-connection.el | ||
| dictionary.el | ||
| dig.el | ||
| dns.el | ||
| eudc-bob.el | ||
| eudc-capf.el | ||
| eudc-export.el | ||
| eudc-hotlist.el | ||
| eudc-vars.el | ||
| eudc.el | ||
| eudcb-bbdb.el | ||
| eudcb-ecomplete.el | ||
| eudcb-ldap.el | ||
| eudcb-mab.el | ||
| eudcb-macos-contacts.el | ||
| eudcb-mailabbrev.el | ||
| eww.el | ||
| gnutls.el | ||
| goto-addr.el | ||
| hmac-def.el | ||
| hmac-md5.el | ||
| imap.el | ||
| ldap.el | ||
| mailcap.el | ||
| mairix.el | ||
| net-utils.el | ||
| network-stream.el | ||
| newst-backend.el | ||
| newst-plainview.el | ||
| newst-reader.el | ||
| newst-ticker.el | ||
| newst-treeview.el | ||
| newsticker.el | ||
| nsm.el | ||
| ntlm.el | ||
| pop3.el | ||
| puny.el | ||
| rcirc.el | ||
| rfc2104.el | ||
| sasl-cram.el | ||
| sasl-digest.el | ||
| sasl-ntlm.el | ||
| sasl-scram-rfc.el | ||
| sasl-scram-sha256.el | ||
| sasl.el | ||
| secrets.el | ||
| shr-color.el | ||
| shr.el | ||
| sieve-manage.el | ||
| sieve-mode.el | ||
| sieve.el | ||
| snmp-mode.el | ||
| soap-client.el | ||
| soap-inspect.el | ||
| socks.el | ||
| telnet.el | ||
| tramp-adb.el | ||
| tramp-archive.el | ||
| tramp-cache.el | ||
| tramp-cmds.el | ||
| tramp-compat.el | ||
| tramp-container.el | ||
| tramp-crypt.el | ||
| tramp-ftp.el | ||
| tramp-fuse.el | ||
| tramp-gvfs.el | ||
| tramp-integration.el | ||
| tramp-message.el | ||
| tramp-rclone.el | ||
| tramp-sh.el | ||
| tramp-smb.el | ||
| tramp-sshfs.el | ||
| tramp-sudoedit.el | ||
| tramp-uu.el | ||
| tramp.el | ||
| trampver.el | ||
| webjump.el | ||
| zeroconf.el | ||