composer / composer/getcomposer.org
web/installer: Use modern TLS
Open
- Dominant language
- Standard ML
- Stars
- 565
- Forks
- 499
- PR merge metrics
- No merged PRs in 30d
Description
The allowed cipher list would benefit from some updates:
https://github.com/composer/getcomposer.org/blob/4aac8c75b914312056feb5160060bdb4e3d71dc5/web/installer#L1367-L1409
Mozilla has a very good reference for this: https://wiki.mozilla.org/Security/Server_Side_TLS
If you come to do make changes, please also address the duplicate list in https://github.com/composer/composer/blob/346356a4dd62967f1b4df6a91a562a1cb9078cfc/src/Composer/Util/StreamContextFactory.php#L136
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.