tls: update default ciphers to use gcm and aes128
authorMike MacCana <mike@certsimple.com>
Fri, 8 May 2015 18:54:34 +0000 (19:54 +0100)
committerRoman Reiss <me@silverwind.io>
Mon, 11 May 2015 11:37:48 +0000 (13:37 +0200)
commit5755fc099f883293530406c423bda47414834057
treee8558aaede355388d68b47308fc88c54699dcf28
parent18d457bd3408557a48b453f13b2b99e1ab5e7159
tls: update default ciphers to use gcm and aes128

AES-GCM or CHACHA20_POLY1305 ciphers must be used in current version of
Chrome to avoid an 'obsolete cryptography' warning.

Prefer 128 bit AES over 192 and 256 bit AES considering attacks that
specifically affect the larger key sizes but do not affect AES 128.

PR-URL: https://github.com/iojs/io.js/pull/1660
Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>
Reviewed-By: Roman Reiss <me@silverwind.io>
doc/api/tls.markdown
lib/tls.js