diff options
author | Philipp Hörist <forenjunkie@chello.at> | 2018-06-28 19:46:20 +0300 |
---|---|---|
committer | Philipp Hörist <forenjunkie@chello.at> | 2018-06-28 19:46:20 +0300 |
commit | 526ea0e8897942db4a8f10c305742f3ff5d89648 (patch) | |
tree | 1b74820f801db2a8661565bd89d2d2294d204782 | |
parent | 849176b1a149c6739b5da4dbdae451bcc93a386d (diff) |
Raise default TLS encryption
RC4-SHA is insecure and TLS1.2 should be on almost all xmpp servers
-rw-r--r-- | nbxmpp/tls_nb.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/nbxmpp/tls_nb.py b/nbxmpp/tls_nb.py index 5edb450..e715e2d 100644 --- a/nbxmpp/tls_nb.py +++ b/nbxmpp/tls_nb.py @@ -269,11 +269,11 @@ class NonBlockingTLS(PlugIn): self.cacerts = cacerts self.mycerts = mycerts if cipher_list is None: - self.cipher_list = b'HIGH:!aNULL:RC4-SHA' + self.cipher_list = b'HIGH:!aNULL' else: self.cipher_list = cipher_list.encode('ascii') if tls_version is None: - self.tls_version = '1.0' + self.tls_version = '1.2' else: self.tls_version = tls_version self.alpn = alpn |