Removal of CBC cipher suites from the default list

As part of our ongoing commitment to offer the highest degree of security by default, Files.com removed CBC cipher suites from its default cipher list as of April 12, 2023.

Qualys SSL Labs, a leading security research company, said this about CBC ciphers: "Due to the difficulties in implementing CBC cipher suites, and the numerous known exploits against bugs in specific implementations, Qualys SSL Labs began marking all CBC cipher suites as WEAK in May 2019. While there are CBC implementations without known exploits, which are safe to use, there are better options that Qualys would like to encourage admins to adopt."

Although some security standards still consider CBC ciphers secure, we prefer to err on the side of caution.

This change should not affect any modern OS or web browsers. If you have any client that is currently able to use Files.com's secure cipher list, there is a 99.9% chance that that client will continue to work. The only exceptions we are aware of relate to services built into OSs that are well past their support lifetime.

If you have an application that requires the use of CBC ciphers, you can re-enable them as part of our insecure ciphers capability by enabling them. In order to enable this setting, go to Settings > Integrations > Transfer Protocols > HTTPS, FTPS, and SFTP ciphers. For further information, please refer to our documentation about ciphers.