Closed Bug 1485847 Opened 7 years ago Closed 4 years ago

Could we get Amazon SES to support modern encryption like mx2.scl3.mozilla.com did in the past?

Categories

(bugzilla.mozilla.org :: Email Notifications, enhancement)

Product:
bugzilla.mozilla.org
Component:
Email Notifications
Version:
Production
Type:
enhancement
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: jan, Unassigned)

Details

(Keywords: nightly-community)

(Jon Buckley [:jbuck] from comment bug 1442994 comment 4) > Hi there, we filed a support ticket with AWS regarding outbound email TLS 1.2 support for SES and got the following response: > > > Our development team is already working to get SES outbound email to support TLS v1.2. > > I cannot provide you with an exact date when this will be available, but it is expected to be available before the deprecation of TLS 1.0 at the end of next June. It was very positive how fast they upgraded to TLS 1.2. Could you, now half a year later, please file another ticket that there is a wish for a modern cipher suite? Amazon SES still only supports ECDHE-RSA-AES256-SHA384 as their best cipher suite, but it should be a 256 bit PFS AEAD cipher suite: ECDHE-RSA-AES256-GCM-SHA384 (like the old mx2.scl3.mozilla.com) or even ECDHE-RSA-CHACHA20-POLY1305 (like Gmail). Thank you!
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.