Camino 1.1b の ssl/tls 関連デフォルト設定

Camino 1.1 Beta のデフォルト設定．

Camino.app/Contents/MacOS/greprefs/security-prefs.js...pref("security.enable_ssl2",             false);pref("security.enable_ssl3",             true);pref("security.enable_tls",		 true);pref("security.ssl2.rc4_128", false);pref("security.ssl2.rc2_128", false);pref("security.ssl2.des_ede3_192", false);pref("security.ssl2.des_64", false);pref("security.ssl2.rc4_40", false);pref("security.ssl2.rc2_40", false);pref("security.ssl3.rsa_rc4_128_md5", true);pref("security.ssl3.rsa_rc4_128_sha", true);pref("security.ssl3.rsa_fips_des_ede3_sha", true);pref("security.ssl3.rsa_des_ede3_sha", true);pref("security.ssl3.rsa_fips_des_sha", false);pref("security.ssl3.rsa_des_sha", false);pref("security.ssl3.rsa_1024_rc4_56_sha", false);pref("security.ssl3.rsa_1024_des_cbc_sha", false);pref("security.ssl3.rsa_rc4_40_md5", false);pref("security.ssl3.rsa_rc2_40_md5", false);pref("security.ssl3.dhe_rsa_aes_256_sha", true);pref("security.ssl3.dhe_dss_aes_256_sha", true);pref("security.ssl3.rsa_aes_256_sha", true);pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", true);pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", true);pref("security.ssl3.ecdhe_ecdsa_des_ede3_sha", true);pref("security.ssl3.ecdhe_ecdsa_rc4_128_sha", true);pref("security.ssl3.ecdhe_ecdsa_null_sha", false);pref("security.ssl3.ecdhe_rsa_aes_256_sha", true);pref("security.ssl3.ecdhe_rsa_aes_128_sha", true);pref("security.ssl3.ecdhe_rsa_des_ede3_sha", true);pref("security.ssl3.ecdhe_rsa_rc4_128_sha", true);pref("security.ssl3.ecdhe_rsa_null_sha", false);pref("security.ssl3.ecdh_ecdsa_aes_256_sha", true);pref("security.ssl3.ecdh_ecdsa_aes_128_sha", true);pref("security.ssl3.ecdh_ecdsa_des_ede3_sha", true);pref("security.ssl3.ecdh_ecdsa_rc4_128_sha", true);pref("security.ssl3.ecdh_ecdsa_null_sha", false);pref("security.ssl3.ecdh_rsa_aes_256_sha", true);pref("security.ssl3.ecdh_rsa_aes_128_sha", true);pref("security.ssl3.ecdh_rsa_des_ede3_sha", true);pref("security.ssl3.ecdh_rsa_rc4_128_sha", true);pref("security.ssl3.ecdh_rsa_null_sha", false);pref("security.ssl3.dhe_rsa_aes_128_sha", true);pref("security.ssl3.dhe_dss_aes_128_sha", true);pref("security.ssl3.rsa_aes_128_sha", true);pref("security.ssl3.dhe_rsa_des_ede3_sha", true);pref("security.ssl3.dhe_dss_des_ede3_sha", true);pref("security.ssl3.dhe_rsa_des_sha", false);pref("security.ssl3.dhe_dss_des_sha", false);pref("security.ssl3.rsa_null_sha", false);pref("security.ssl3.rsa_null_md5", false);...

• mod_ssl: Reference: SSLCipherSuite
• "SSL 2.0" 脆弱 - Google 検索

• 

Firefox 2.0.0.3 の暗号化ダイアログ．そもそも SSL 2.0 のチェック・ボックスがない． Camino 同様に about: config でカスタム指定することはできるが，そりゃ危険．