diff options
| author | Mats Wahlberg <rcxslinger@gmail.com> | 2020-04-22 16:22:48 +0200 |
|---|---|---|
| committer | Mats Wahlberg <rcxslinger@gmail.com> | 2020-09-30 13:52:31 +0200 |
| commit | 4f86047a24bdfd1cdb730487f828d5b24331d6d4 (patch) | |
| tree | cc5589e00c40ac9f50b6f96a4c34ddae11c16258 /gradle | |
| parent | 3f0420544a87a974a04b957606a2ace8f9b96e47 (diff) | |
| download | AntennaPod-4f86047a24bdfd1cdb730487f828d5b24331d6d4.zip | |
Enable TLSv1.3 and harden protocols and cipher suites for Free builds
The Free build bundles a modern Conscrypt which means TLSv1.3 is always
guaranteed no matter android version. So it can always be enabled. Since
it also provides modern cipher suites, there is no need to enable older
protocols than TLSv1.2 (that is: SSLv3, TLSv1.0 and TLSv1.1 which are
all now deprecated).
And the support for modern cipher suites also means there is no need to
explicitly enable the following (obsolete+unsafe) ciphers suites:
* TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
* TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
on Android API < 21 (Android < 5.0).
No changes are made to the Play builds (since the available security
provider can't be guaranteed to support modern protocols and cipher
suites).
Diffstat (limited to 'gradle')
0 files changed, 0 insertions, 0 deletions