Re: WebRTC DTLS cipher suite selection logic

2015-10-03 Thread Martin Thomson
We support and offer the RSA equivalent suites, as well as some of the _DHE_ variants. Wireshark reports: Cipher Suites (8 suites) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) Cipher Suite: TLS_ECDHE_ECDSA_WITH_A

Re: WebRTC DTLS cipher suite selection logic

2015-10-03 Thread ors . szabo . hu
Thanks Martin, but i suppose that doesn't mean that Firefox only includes these two cipher suites in the ClientHello: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA I remember seeing many more earlier, e.g. DHE-RSA and ECDHE-RSA. I know that non-PFS ciphers are rem