mailu

Commit Graph

Author	SHA1	Message	Date
Florent Daigniere	74c5e92628	Switch to ffdhe3072 to enable RFC 7919 The idea being: - it's a "nothing up my sleeves" group - it may help shave off some bytes of the SSL handshake; That being said, I doubt that clients that are modern enough to support this RFC won't offer an EC kex https://raw.githubusercontent.com/internetstandards/dhe_groups/master/ffdhe3072.pem	3 years ago
Florent Daigniere	6704cb869a	Switch to 3072bits dhparam (instead of 4096bits) We aim for 128bits of security here	4 years ago
kaiyou	bfc898c2d8	Move dhparam to /conf	7 years ago

Author

SHA1

Message

Date

Florent Daigniere

74c5e92628

Switch to ffdhe3072 to enable RFC 7919

The idea being:
- it's a "nothing up my sleeves" group
- it may help shave off some bytes of the SSL handshake; That being
said, I doubt that clients that are modern enough to support this RFC
won't offer an EC kex

https://raw.githubusercontent.com/internetstandards/dhe_groups/master/ffdhe3072.pem

Florent Daigniere

6704cb869a

Switch to 3072bits dhparam (instead of 4096bits)

We aim for 128bits of security here

kaiyou

bfc898c2d8

Move dhparam to /conf

3 Commits (f9ba0e688fa3089b98db4dc8944cad9ea11c605e)