fedora28 and strong crypto settings
Hi,
regarding the strong crypto change in Fedora28 [0], we have identified
few (usually internal) sites which break under firefox or other tools.
The main reason for this breakage is that these sites only support
Diffie-Hellman with 1024-bit parameters which are considered too weak
by this change.
I believe however that we should gather as many data as we can related
to this security update in Fedora28, and decide after F28 beta is
released on whether to back this change off, or to ignore this
breakage. Any data gathered is very useful in planning a future
strengthening. Any objections?
For any issues regarding crypto breakage in F28 please use
https://bugzilla.redhat.com/show_bug.cgi?id=1534532
to report it.
regards,
Nikos
[0].
https://fedoraproject.org/wiki/Changes/StrongCryptoSettings