Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:101212
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain kelunik.com from 81.169.146.221 cause and error)
MIME-Version: 1.0
References: <a64088a5-e93b-3450-fe8c-8ba6ac9d851a@php.net> <CADNQb0VA+-E2B21EZCfzau7v0_0=SeheHB+cxZCsx7RoVNn8jA@mail.gmail.com>
 <41630a4e-8772-bdfb-e859-831a36dc67ea@rhsoft.net>
In-Reply-To: <41630a4e-8772-bdfb-e859-831a36dc67ea@rhsoft.net>
Date: Fri, 01 Dec 2017 16:44:17 +0000
Message-ID: <CANUQDCjsz31t-VqbLeUOc-qJd=wzQ8Tbk2UGhY-74xw+JaGHUA@mail.gmail.com>
To: lists@rhsoft.net
Cc: PHP Internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="f403045f29a6f9c7de055f4a142d"
Subject: Re: [PHP-DEV] PHP 7.2.0 Released
From: me@kelunik.com (Niklas Keller)

--f403045f29a6f9c7de055f4a142d
Content-Type: text/plain; charset="UTF-8"

lists@rhsoft.net <lists@rhsoft.net> schrieb am Fr., 1. Dez. 2017, 17:13:

>
>
> Am 30.11.2017 um 17:41 schrieb Hannes Magnusson:
> >> - Improve TLS constants to sane values
> >
> > This worries me a lot. Last time someone thought it was a good idea they
> > introduced security vulnerability for all apps that used them.
>
> that PHP now instead of ECDHE-RSA-AES128-SHA uses
> ECDHE-RSA-AES128-GCM-SHA256 for TLS connections (and before 7.1 with
> openssl 1.1 it was not able to use ECHDE at all) or that PHP don't let
> the crypto library alone at all?
>
> at least it got better with 7.2
>

We only changed the defaults in 7.2, it was possible to use the same
features before, except for the security level.

Regards, Niklas

>

--f403045f29a6f9c7de055f4a142d--