<div dir="ltr"><div>Anyone have any thoughts or hints on this?<br>Am I the only one interested in upgrading the security aspects of FS?<br><br></div>Don't mean to be a pain, but I'm surprised at the apparent lack of interest.<br>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Sep 11, 2013 at 8:09 PM, privs <span dir="ltr"><<a href="mailto:privus007@gmail.com" target="_blank">privus007@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
Given the recent revelations regarding the state of the net's (in)security,<br>
and as a longtime user of TLS with SRTP in FS, I think it would be prudent<br>
to update the TLS version and ciphers that FS can negotiate.<br>
<br>
Currently FS only supports TLS 1.0 (correct me if I'm wrong), which has<br>
some worrying security issues<br>
<<a href="http://www.wired.co.uk/news/archive/2013-02/05/weakness-in-tsl-protocol" target="_blank">http://www.wired.co.uk/news/archive/2013-02/05/weakness-in-tsl-protocol</a>> .<br>
Is it possible to upgrade to TLS 1.1 (or even better, 1.2)? I'd like to use<br>
AES in the 256 key length instead of the standard 128.<br>
<br>
Anyone know if this is on the agenda and/or where I can have a closer look<br>
at the cipher order presented by FS?<br>
<br>
Thanks<br>
<br>
<br>
<br>
--<br>
View this message in context: <a href="http://freeswitch-users.2379917.n2.nabble.com/Updating-TLS-tp7594774.html" target="_blank">http://freeswitch-users.2379917.n2.nabble.com/Updating-TLS-tp7594774.html</a><br>
Sent from the freeswitch-users mailing list archive at Nabble.com.<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div><br></div>