We understand your concerns about week cipher and ssl versions being enforced/accepted. We did try to use stronger versions, but because we support many different os flavors/versions, it didn't work for one or the other.
How about this as a solution: We provide ssl version and ciphers list as a configuration option and anyone who has concerns about security can set those values after making sure that they work with their installation?
Maik and Michael,
We understand your concerns about week cipher and ssl versions being enforced/accepted. We did try to use stronger versions, but because we support many different os flavors/versions, it didn't work for one or the other.
How about this as a solution: We provide ssl version and ciphers list as a configuration option and anyone who has concerns about security can set those values after making sure that they work with their installation?
Sachin Bansal