GitHub

Discontinue support for weak cryptographic standards

Feb 27, 2017Patrick Toomey
Discontinue support for weak cryptographic standards
SummaryAI, from the source post

This post announces the deprecation and eventual disablement of TLSv1/TLSv1.1 for HTTPS connections and diffie-hellman-group1-sha1/diffie-hellman-group14-sha1 for SSH connections. It provides technical details on the vulnerabilities of these older standards (POODLE, Logjam) and the rationale for upgrading to TLS 1.2 and diffie-hellman-group-exchange-sha256. The post outlines a timeline for disablement (February 1, 2018) and the steps being taken to minimize user impact, including internal updates to SSH implementations and communication to affected users.

More from the Post-quantum SSH security for Git access trail