)]}'
{"security-guide/source/secure-communication/introduction-to-ssl-and-tls.rst":[{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d9dcc8f36d998ac2e9562d4d78bea02abae9be6b","unresolved":false,"context_lines":[{"line_number":109,"context_line":"Cryptographic algorithms, cipher modes, and protocols"},{"line_number":110,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"It is recommended that only TLSv1.2 is used. Other versions such as TLS 1.0"},{"line_number":113,"context_line":"and 1.1 are vulnerable to multiple attacks. TLS 1.0 should be disabled completely"},{"line_number":114,"context_line":"in your environment. TLSv1.1 may be used for broad client compatibility however"},{"line_number":115,"context_line":"caution should be exercised when enabling this protocol, should only be done if"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7af24918_2330f39d","line":112,"range":{"start_line":112,"start_character":0,"end_line":112,"end_character":5},"updated":"2016-03-02 20:29:27.000000000","message":"i think we can leave this as \"We recommend\", i had thought the doc conventions spoke about writing in a more direct manner.","commit_id":"aeb8d237efb90588e9b861d858a12a98e7f754fd"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d9dcc8f36d998ac2e9562d4d78bea02abae9be6b","unresolved":false,"context_lines":[{"line_number":112,"context_line":"It is recommended that only TLSv1.2 is used. Other versions such as TLS 1.0"},{"line_number":113,"context_line":"and 1.1 are vulnerable to multiple attacks. TLS 1.0 should be disabled completely"},{"line_number":114,"context_line":"in your environment. TLSv1.1 may be used for broad client compatibility however"},{"line_number":115,"context_line":"caution should be exercised when enabling this protocol, should only be done if"},{"line_number":116,"context_line":"there is a mandatory requirement and you are aware of the risks involved. Older"},{"line_number":117,"context_line":"versions of TLS, should not be used as these versions include SSLv2 which is"},{"line_number":118,"context_line":"deprecated, and SSLv3 which suffers from the attack known as POODLE. When"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7af24918_6302fb70","line":115,"range":{"start_line":115,"start_character":57,"end_line":115,"end_character":63},"updated":"2016-03-02 20:29:27.000000000","message":"maybe missed an \"it\"?","commit_id":"aeb8d237efb90588e9b861d858a12a98e7f754fd"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"69a2b8db258a646571d89381fe65ccddce78a5d0","unresolved":false,"context_lines":[{"line_number":109,"context_line":"Cryptographic algorithms, cipher modes, and protocols"},{"line_number":110,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"We recommend that only TLSv1.2 is used. Other versions such as TLS 1.0"},{"line_number":113,"context_line":"and 1.1 are vulnerable to multiple attacks. TLS 1.0 should be disabled"},{"line_number":114,"context_line":"completely in your environment. TLSv1.1 may be used for broad client"},{"line_number":115,"context_line":"compatibility however caution should be exercised when enabling this"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_77c9c4ab","line":112,"updated":"2016-03-03 22:45:15.000000000","message":"Could revise like, \"TLS version 1.2 is the recommended cryptography protocol.\"","commit_id":"4395813f705d92a85ce9d43305f2d4a4dbf241bb"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"69a2b8db258a646571d89381fe65ccddce78a5d0","unresolved":false,"context_lines":[{"line_number":111,"context_line":""},{"line_number":112,"context_line":"We recommend that only TLSv1.2 is used. Other versions such as TLS 1.0"},{"line_number":113,"context_line":"and 1.1 are vulnerable to multiple attacks. TLS 1.0 should be disabled"},{"line_number":114,"context_line":"completely in your environment. TLSv1.1 may be used for broad client"},{"line_number":115,"context_line":"compatibility however caution should be exercised when enabling this"},{"line_number":116,"context_line":"protocol, it should only be done if there is a mandatory requirement"},{"line_number":117,"context_line":"and you are aware of the risks involved. Older versions of TLS, should"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_977a9022","line":114,"range":{"start_line":114,"start_character":32,"end_line":114,"end_character":39},"updated":"2016-03-03 22:45:15.000000000","message":"Suggest keeping how we reference the versions consistent. I like TLS version 1.1.","commit_id":"4395813f705d92a85ce9d43305f2d4a4dbf241bb"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"69a2b8db258a646571d89381fe65ccddce78a5d0","unresolved":false,"context_lines":[{"line_number":112,"context_line":"We recommend that only TLSv1.2 is used. Other versions such as TLS 1.0"},{"line_number":113,"context_line":"and 1.1 are vulnerable to multiple attacks. TLS 1.0 should be disabled"},{"line_number":114,"context_line":"completely in your environment. TLSv1.1 may be used for broad client"},{"line_number":115,"context_line":"compatibility however caution should be exercised when enabling this"},{"line_number":116,"context_line":"protocol, it should only be done if there is a mandatory requirement"},{"line_number":117,"context_line":"and you are aware of the risks involved. Older versions of TLS, should"},{"line_number":118,"context_line":"not be used as these versions include SSLv2 which is deprecated, and"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_173200a7","line":115,"range":{"start_line":115,"start_character":13,"end_line":115,"end_character":55},"updated":"2016-03-03 22:45:15.000000000","message":"Suggest, \"compatibility, however, exercise caution when enabling...\"","commit_id":"4395813f705d92a85ce9d43305f2d4a4dbf241bb"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"69a2b8db258a646571d89381fe65ccddce78a5d0","unresolved":false,"context_lines":[{"line_number":113,"context_line":"and 1.1 are vulnerable to multiple attacks. TLS 1.0 should be disabled"},{"line_number":114,"context_line":"completely in your environment. TLSv1.1 may be used for broad client"},{"line_number":115,"context_line":"compatibility however caution should be exercised when enabling this"},{"line_number":116,"context_line":"protocol, it should only be done if there is a mandatory requirement"},{"line_number":117,"context_line":"and you are aware of the risks involved. Older versions of TLS, should"},{"line_number":118,"context_line":"not be used as these versions include SSLv2 which is deprecated, and"},{"line_number":119,"context_line":"SSLv3 which suffers from the attack known as POODLE. When using TLS v1.2"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_77aa6486","line":116,"range":{"start_line":116,"start_character":8,"end_line":116,"end_character":12},"updated":"2016-03-03 22:45:15.000000000","message":"Recommend starting a new sentence, \"Only enable TLS version 1.1 if there is a mandatory requirement and you are aware of the risks involved.\"","commit_id":"4395813f705d92a85ce9d43305f2d4a4dbf241bb"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"69a2b8db258a646571d89381fe65ccddce78a5d0","unresolved":false,"context_lines":[{"line_number":114,"context_line":"completely in your environment. TLSv1.1 may be used for broad client"},{"line_number":115,"context_line":"compatibility however caution should be exercised when enabling this"},{"line_number":116,"context_line":"protocol, it should only be done if there is a mandatory requirement"},{"line_number":117,"context_line":"and you are aware of the risks involved. Older versions of TLS, should"},{"line_number":118,"context_line":"not be used as these versions include SSLv2 which is deprecated, and"},{"line_number":119,"context_line":"SSLv3 which suffers from the attack known as POODLE. When using TLS v1.2"},{"line_number":120,"context_line":"and in control of both the clients and the server, the cipher suite"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_778264c9","line":117,"range":{"start_line":117,"start_character":62,"end_line":117,"end_character":63},"updated":"2016-03-03 22:45:15.000000000","message":"comma not necessary","commit_id":"4395813f705d92a85ce9d43305f2d4a4dbf241bb"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"69a2b8db258a646571d89381fe65ccddce78a5d0","unresolved":false,"context_lines":[{"line_number":116,"context_line":"protocol, it should only be done if there is a mandatory requirement"},{"line_number":117,"context_line":"and you are aware of the risks involved. Older versions of TLS, should"},{"line_number":118,"context_line":"not be used as these versions include SSLv2 which is deprecated, and"},{"line_number":119,"context_line":"SSLv3 which suffers from the attack known as POODLE. When using TLS v1.2"},{"line_number":120,"context_line":"and in control of both the clients and the server, the cipher suite"},{"line_number":121,"context_line":"should be limited to ``ECDHE-ECDSA-AES256-GCM-SHA384``. In circumstances"},{"line_number":122,"context_line":"where you don’t control both ends and are using TLS 1.1 or 1.2 the more"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_f74dd4c4","line":119,"range":{"start_line":119,"start_character":53,"end_line":119,"end_character":63},"updated":"2016-03-03 22:45:15.000000000","message":"Suggest, \"When you are using...\"","commit_id":"4395813f705d92a85ce9d43305f2d4a4dbf241bb"}]}