Perhaps trim legacy crypto options in FileSender 3.x

filesender / governance

Governance and policies for the FileSender software development

0 stars 0 forks source link

Perhaps trim legacy crypto options in FileSender 3.x #18

Open monkeyiq opened 2 years ago

monkeyiq commented 2 years ago

FileSender has options for which "crypto mode" to use which include AES-CBC and modes that do not use PBKDF2 hashing. These are modes 0, 1, and 2. This leaves mode 3 which is AES-GCM with PBKDF2.

Since we have moved FileSender 3.x to the most recent Bootstrap and removed IE11 support. With Edge moving to being Chromium backed we may consider only supporting mode 3 (AES-GCM with PBKDF2) in FileSender 3.x which works across Safari, Edge (Chromium), Firefox and Chrome.

WebSpider commented 2 years ago

Suggestion: Mark 'legacy' as deprecated, and remove it at 4.0

Or: mark is deprecated in 2.x already, and remove it from 3.x before there is a full release in 3.x

WebSpider commented 11 months ago

Can we discuss this in the next planned meeting?