Company
Date Published
Author
Patrick Toomey
Word count
452
Language
English
Hacker News points
None

Summary

Earlier this year, GitHub announced plans to deprecate several weak cryptographic standards, including TLSv1, TLSv1.1, diffie-hellman-group1-sha1, and diffie-hellman-group14-sha1, with a target date for disabling these protocols set for February 1, 2018. In preparation, GitHub has enabled the diffie-hellman-group-exchange-sha256 key exchange, which is widely supported and allows most legacy clients to transition away smoothly from outdated algorithms. Despite this, a small percentage of traffic still uses the older key exchanges due to client preferences or lack of support for the newer algorithm, primarily from older versions of a popular Java library, JSch. GitHub is conducting a deeper analysis to identify and assist projects using outdated libraries to ensure a seamless transition before the deprecation deadline.