Richard Zowalla created GERONIMO-6793: -----------------------------------------
Summary: Do not auto-enable all available Cyphers in TLS/SSL protocol handling in MailConnection Key: GERONIMO-6793 URL: https://issues.apache.org/jira/browse/GERONIMO-6793 Project: Geronimo Issue Type: Improvement Security Level: public (Regular issues) Components: mail Reporter: Richard Zowalla Check and discuss, if it is a good idea to enable all cyphers in TLS/SSL protocol handling in MailConnection.java Some cyphers are deprecated for good reasons and shouldn't be used. This enhancement might possibily include * Allow users to specifiy cyphers via properties (custom factory is already possible) * If we have no user defined cyphers available, fallback to the JVMs default cyphers. This is a follow up issue raised from the discussion on the dev mailing list, see http://mail-archives.apache.org/mod_mbox/geronimo-dev/202012.mbox/%3C096fbb867eda8e090eddf80fbd81cf787ac87945.camel%40hs-heilbronn.de%3E -- This message was sent by Atlassian Jira (v8.3.4#803005)