Firefox Cipher

[Del Monego, Dirk]

Hi all,

first of all many thanks for maintaining the Firefox port! I regionized that a very important Cipher
is not included in Firefox:
DHE-RSA-AES256-GCM-SHA256

only the ECDHE version is supported. In fact ECDHE is compromized because its based on
NIST curves which using prime fields instead of a "real" prime generator.
I patch my Firefox for month and it works absolutely fine. 

Only the files:
nsNSSComponent.cpp and
security-prefs.js
need small patches. I attach the diffs.

I think it would be nice if Firefox supports the cipher "out of the box".

Best regards Dirk


-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: nsNSSComponent.cpp-patch
URL: <http://lists.freebsd.org/pipermail/freebsd-gecko/attachments/20150312/592512f4/attachment.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: security-prefs.js-patch
URL: <http://lists.freebsd.org/pipermail/freebsd-gecko/attachments/20150312/592512f4/attachment-0001.ksh>