[Ach] Removed prosody

[Pepi Zawodsky]

On 19 Feb 2015, at 19:13, Aaron Zauner <azet at azet.org> wrote:
> Pepi Zawodsky wrote:
>>    options = { "no_sslv2", "no_sslv3", "no_ticket", "no_compression", "cipher_server_preference", "single_dh_use", "single_ecdh_use" };
> These seem to be the default options in 0.9.6?
> https://prosody.im/doc/advanced_ssl_config#options

Nope, the defaults that are installed are different from what the documentation page suggests or even recommends.
Under any circumstance it is necessary to review these settings on any Prosody installation to be sure they are set that way.

This will also change with the release of 0.10 where there is no ETA.
Pepi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.cert.at/pipermail/ach/attachments/20150219/c5e46ee6/attachment.sig>