cloudflare / cloudflare/sslconfig
Ciphers marked weak by SSL Labs
Open
- Dominant language
- No language data
- Stars
- 1.3k
- Forks
- 142
- PR merge metrics
- No merged PRs in 30d
Description
The follower ciphers have been marked as Weak by ssllabs and while it does not result in a lower grade, I wanted to get Cloudflare's opinion on deprecating support for these ciphers:
- TLS_RSA_WITH_AES_128_GCM_SHA256
- TLS_RSA_WITH_AES_128_CBC_SHA
- TLS_RSA_WITH_AES_128_CBC_SHA256
- TLS_RSA_WITH_AES_256_GCM_SHA384
- TLS_RSA_WITH_AES_256_CBC_SHA
- TLS_RSA_WITH_AES_256_CBC_SHA256
I believe this would require removing the following from `ssl_ciphers`:
RSA+AES128 and RSA+AES256
Thanks in advance!
Contributor guide
Assessment
This issue has not been assessed yet.