libwww-perl / LWP-Protocol-https

Provide https support for LWP::UserAgent
https://metacpan.org/pod/LWP::Protocol::https
Other
16 stars 35 forks source link

No warning or indication is given when the server is using RC4 protocol #28

Open mmcclenn opened 8 years ago

mmcclenn commented 8 years ago

Now that the RC4 cipher has been deprecated, this module should at minimum give some kind of warning when a connection is made to a server that uses this cipher.

Even better would be to refuse any connection using this cipher by default. An option could be added to ssl_options, something like { allow_rc4 => 1 } for people who absolutely insist on continuing to use it.