Hardening of network protocol implementations
We should harden the network protocol implementation and configuration by default. This includes for example:
- disabling known unsafe protocols
- disabling negotiation of no-encryption modes
Those options are specific to each protocol and there are specific options and configurations for each protocol that should be set. If some unsafe mode is required (for compatibility reasons for example) we should document the reasons.
This task should be updated for each protocol.