search

OWASP / CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
https://cheatsheetseries.owasp.org
Creative Commons Attribution Share Alike 4.0 International
27.1k stars 3.8k forks source link

Update: TLS Cipher String Cheat Sheet #1295

Closed otkd closed 5 months ago

otkd commented 5 months ago

What is missing or needs to be updated?

Effectively devoid of content with the exception of the Mozilla Config Generator, while a useful tool it doesn't provide much additional information as to why use certain ciphers strings.

How should this be resolved?

Had considered adding details about specific ciphers and change in TLS1.3, however I instead propose merging this Cheat Sheet with the Transport Layer Protection Cheat Sheet and renaming the merged sheet Transport Layer Security Cheat Sheet

szh commented 5 months ago

I have to agree with this. This single paragraph of content does not merit its own cheat sheet. I also agree that "Transport Layer Security Cheat Sheet" would be a better title for the merged one. @otkd would you like to submit a PR for this?

otkd commented 5 months ago

I have to agree with this. This single paragraph of content does not merit its own cheat sheet. I also agree that "Transport Layer Security Cheat Sheet" would be a better title for the merged one. @otkd would you like to submit a PR for this?

@szh submitted

szh commented 5 months ago

Fixed in #1296