The purpose is to use the most secure protocols, cipher suites and hashing algorithms that both ends support. To use the strongest ciphers and algorithms it's important to disable the ciphers and algorithms you no longer want to see used.
How do I disable cipher suites?
Step 2: Disable cipher suites
- Restart the server using the node.restart command: node.restart.
- To verify the new cipher settings in your Code42 environment, enter the prop. show c42. ...
- Verify that the cipher exclusion works as expected by running an analysis on your Code42 server of the protocols and cipher suites in use.
Which cipher suites are still considered secure?
Currently, the most secure and most recommended combination of these four is: Elliptic Curve Diffie–Hellman (ECDH), Elliptic Curve Digital Signature Algorithm (ECDSA), AES 256 in Galois Counter Mode (AES256-GCM), and SHA384. See the full list of ciphers supported by OpenSSL.
