#2362 F33 System-Wide Change: Strong crypto settings: phase 2
Closed: Accepted by churchyard. Opened by bcotton.

We update the current system-wide crypto policy to further disable legacy cryptographic protocols (TLS 1.0 and TLS 1.1), weak Diffie-Hellman key exchange sizes (1024 bit), and use of the SHA-1 hash in signatures.


+1

After a week, I count the vote as (+3,0,-0). By policy, I am proceeding with this change as approved.

Metadata Update from @bcotton:
- Issue tagged with: pending announcement

Announced in https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/4HEN3PGZDGCTFP3X53QN3ULDIWE4BHCC/

Metadata Update from @churchyard:
- Issue close_status updated to: Accepted
- Issue status updated to: Closed (was: Open)

Metadata Update from @bcotton:
- Issue untagged with: F33
- Issue set to the milestone: Fedora 33

Metadata