From 256841cf2cfbeb0ccd28de53427583ef348a1ab6 Mon Sep 17 00:00:00 2001 From: Leorize Date: Wed, 3 Jun 2020 17:51:46 -0500 Subject: [PATCH] changelog.md: clarify that only the default has changed [ci-skip] --- changelog.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/changelog.md b/changelog.md index e20077feb8..bbcf2ed183 100644 --- a/changelog.md +++ b/changelog.md @@ -102,7 +102,7 @@ - Add `ssl_config` module containing lists of secure ciphers as recommended by [Mozilla OpSec](https://wiki.mozilla.org/Security/Server_Side_TLS) -- `net.newContext` now uses the list of ciphers targeting +- `net.newContext` now defaults to the list of ciphers targeting ["Intermediate compatibility"](https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28recommended.29) per Mozilla's recommendation instead of `ALL`. This change should protect users from the use of weak and insecure ciphers while still provides