Skip to content

Commit a682126

Browse files
committed
Clarify that TLS cipher suites are for TLS 1.2
DNSCrypt/dnscrypt-proxy@c66023c
1 parent 0a556a0 commit a682126

1 file changed

Lines changed: 2 additions & 4 deletions

File tree

config/dnscrypt-proxy.toml

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -207,20 +207,18 @@ dnscrypt_ephemeral_keys = true
207207
# tls_disable_session_tickets = false
208208

209209

210-
## DoH: Use a specific cipher suite instead of the server preference
210+
## DoH: Use TLS 1.2 and specific cipher suite instead of the server preference
211211
## 49199 = TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
212212
## 49195 = TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
213213
## 52392 = TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
214214
## 52393 = TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
215-
## 4865 = TLS_AES_128_GCM_SHA256
216-
## 4867 = TLS_CHACHA20_POLY1305_SHA256
217215
##
218216
## On non-Intel CPUs such as MIPS routers and ARM systems (Android, Raspberry Pi...),
219217
## the following suite improves performance.
220218
## This may also help on Intel CPUs running 32-bit operating systems.
221219
##
222220
## Keep tls_cipher_suite empty if you have issues fetching sources or
223-
## connecting to some DoH servers. Google and Cloudflare are fine with it.
221+
## connecting to some DoH servers.
224222

225223
# tls_cipher_suite = [52392, 49199]
226224

0 commit comments

Comments
 (0)