[issue20995] Use Better Default Ciphers for the SSL Module

[Antoine Pitrou]

Antoine Pitrou added the comment:

I think the proposed cipher string is still overly complicated and tedious to maintain. The following seems to achieve similar results:

'EECDH+AESGCM:DH+AESGCM:ECDH:DH:HIGH:!aNULL:!eNULL:!MD5:!DSS:!LOW:!EXPORT'

Also, as Marc-André points out, we probably shouldn't ban RC4 even from the so-called "restricted ciphers".

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue20995>
_______________________________________