Global Variables

The following global variables are available globally.

  • A secure default configuration of cipher suites for TLS 1.2 and earlier.

    The goal of this cipher suite string is:

    • Prefer cipher suites that offer Perfect Forward Secrecy (DHE/ECDHE)
    • Prefer ECDH(E) to DH(E) for performance.
    • Prefer any AEAD cipher suite over non-AEAD suites for better performance and security
    • Prefer AES-GCM over ChaCha20 because hardware-accelerated AES is common
    • Disable NULL authentication and encryption and any appearance of MD5

    Declaration

    Swift

    public let defaultCipherSuites: String