Anyone have any thoughts or hints on this? Am I the only one interested in upgrading the security aspects of FS? Don't mean to be a pain, but I'm surprised at the apparent lack of interest. On Wed, Sep 11, 2013 at 8:09 PM, privs <privus007@gmail.com> wrote:
Hi,
Given the recent revelations regarding the state of the net's (in)security, and as a longtime user of TLS with SRTP in FS, I think it would be prudent to update the TLS version and ciphers that FS can negotiate.
Currently FS only supports TLS 1.0 (correct me if I'm wrong), which has some worrying security issues <http://www.wired.co.uk/news/archive/2013-02/05/weakness-in-tsl-protocol> . Is it possible to upgrade to TLS 1.1 (or even better, 1.2)? I'd like to use AES in the 256 key length instead of the standard 128.
Anyone know if this is on the agenda and/or where I can have a closer look at the cipher order presented by FS?
Thanks
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Updating-TLS-tp7594774.html Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org