garydgregory commented on PR #686: URL: https://github.com/apache/httpcomponents-core/pull/686#issuecomment-5166107964
@ok2c I added some Javadoc and left the test disabled. I'm not sure this PR should untangle weak vs. prohibited. I am concerned that adding RFC10015 "deprecated" (but not "discouraged") to our H2 blacklist (prohibited list) will blow up too many existing clients. A future enhancement could allow clients to enabled failing when an RFC10015 "deprecated" or "discouraged" cipher is used. This could be useful for pentesting. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
