| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_SSL_SSL_CIPHER_SUITE_NAMES_H_ | 5 #ifndef NET_SSL_SSL_CIPHER_SUITE_NAMES_H_ |
| 6 #define NET_SSL_SSL_CIPHER_SUITE_NAMES_H_ | 6 #define NET_SSL_SSL_CIPHER_SUITE_NAMES_H_ |
| 7 | 7 |
| 8 #include <string> | 8 #include <string> |
| 9 | 9 |
| 10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
| (...skipping 37 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 48 | 48 |
| 49 // |cipher_suite| is the IANA id for the cipher suite. What a "secure" | 49 // |cipher_suite| is the IANA id for the cipher suite. What a "secure" |
| 50 // cipher suite is arbitrarily determined here. The intent is to indicate what | 50 // cipher suite is arbitrarily determined here. The intent is to indicate what |
| 51 // cipher suites meet modern security standards when backwards compatibility can | 51 // cipher suites meet modern security standards when backwards compatibility can |
| 52 // be ignored. Notably, HTTP/2 requires/encourages this sort of validation of | 52 // be ignored. Notably, HTTP/2 requires/encourages this sort of validation of |
| 53 // cipher suites: https://http2.github.io/http2-spec/#TLSUsage. | 53 // cipher suites: https://http2.github.io/http2-spec/#TLSUsage. |
| 54 // | 54 // |
| 55 // Currently, this function follows these criteria: | 55 // Currently, this function follows these criteria: |
| 56 // 1) Only uses forward secure key exchanges | 56 // 1) Only uses forward secure key exchanges |
| 57 // 2) Only uses AEADs | 57 // 2) Only uses AEADs |
| 58 NET_EXPORT_PRIVATE bool IsSecureTLSCipherSuite(uint16 cipher_suite); | 58 NET_EXPORT bool IsSecureTLSCipherSuite(uint16 cipher_suite); |
| 59 | 59 |
| 60 } // namespace net | 60 } // namespace net |
| 61 | 61 |
| 62 #endif // NET_SSL_SSL_CIPHER_SUITE_NAMES_H_ | 62 #endif // NET_SSL_SSL_CIPHER_SUITE_NAMES_H_ |
| OLD | NEW |