The following global variables are available globally.
A secure default configuration of cipher suites for TLS 1.2 and earlier.
The goal of this cipher suite string is:
- Prefer cipher suites that offer Perfect Forward Secrecy (DHE/ECDHE)
- Prefer ECDH(E) to DH(E) for performance.
- Prefer any AEAD cipher suite over non-AEAD suites for better performance and security
- Prefer AES-GCM over ChaCha20 because hardware-accelerated AES is common
- Disable NULL authentication and encryption and any appearance of MD5
public let defaultCipherSuites: String