Automatic cipher suite ordering in crypto/tls - The Go Programming Language

Filippo Valsorda 15 September 2021 The Go standard library provides crypto/tls, a robust implementation of Transport Layer Security (TLS), the most important security protocol on the Internet, and the fundamental component of HTTPS. In Go 1.17 we made its configuration easier, more secure, and more efficient by automating the priority order of cipher suites. How cipher suites work Cipher suites da

[jovi0608]

Go1.17からTLSのCipherSuite順番は自動で決めるようにするとのこと。PreferServerCipherSuitesは無視されます。暗号危殆化などはセキュリティリリースとして対応。ECDHE/AEAD優先AES-GCM/ChaCha選択などのロジックが組み込まれます。