Anyone have any thoughts or hints on this?
Am I the only one interested in upgrading the security aspects of FS?

Don't mean to be a pain, but I'm surprised at the apparent lack of interest.


On Wed, Sep 11, 2013 at 8:09 PM, privs <privus007@gmail.com> wrote:
Hi,

Given the recent revelations regarding the state of the net's (in)security,
and as a longtime user of TLS with SRTP in FS, I think it would be prudent
to update the TLS version and ciphers that FS can negotiate.

Currently FS only supports TLS 1.0 (correct me if I'm wrong), which has
some worrying security issues
<http://www.wired.co.uk/news/archive/2013-02/05/weakness-in-tsl-protocol>  .
Is it possible to upgrade to TLS 1.1 (or even better, 1.2)? I'd like to use
AES in the 256 key length instead of the standard 128.

Anyone know if this is on the agenda and/or where I can have a closer look
at the cipher order presented by FS?

Thanks



--
View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Updating-TLS-tp7594774.html
Sent from the freeswitch-users mailing list archive at Nabble.com.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org