cassidyjames / ephemeral

A private-by-default, always-incognito browser for elementary OS
https://cassidyjames.com
GNU General Public License v3.0
154 stars 22 forks source link

Remove 3DES cipher suits #225

Open janxkoci opened 4 years ago

janxkoci commented 4 years ago

Ephemeral still supports 3DES cipher suits, which are considered unsafe. You can test it here.

I don't know if this is within your reach or you would need upstream webkit/glib fix, but I wanted to at least bring this issue to your attention.

This issue is also present in Epiphany 3.28.6 (the default browser in elementary OS Hera), which shares the same webkit version. Ephy Nightly (from flatpak) has this fixed and no longer gets Bad score, only the Probably okay (i.e. same as other browsers).

Some more info can be found at GNOME's Gitlab (also check the link therein).