hipchat server not supporting SSL Forward Secrecy

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

XMLWordPrintable

    • Severity 3 - Minor

      Security scans report that hipchat server isn't supporting SSL Forward Secrecy.

      HipChat Server supports TLS_RSA_WITH_AES_128_CBC_SHA256 which isn't forward secret. This is commonly supported for backwards compatibility, but, it is most likely not necessary on most platforms these days.

      Please consider disabling this for future HipChat Server releases.

              Assignee:
              Vlad Cretu (Inactive)
              Reporter:
              Kent Baxley (Inactive)
              Archiver:
              Michael Andreacchio

                Created:
                Updated:
                Resolved:
                Archived: