Talk:Security/Server Side TLS: Difference between revisions

Line 32: Line 32:


That being said, sites that don't want to support WinXP users can feel free to disable RC4, or swap it with 3DES.
That being said, sites that don't want to support WinXP users can feel free to disable RC4, or swap it with 3DES.
=== by mkwan on 30 April 2014 ===
It seems like the ciphersuite in https://wiki.mozilla.org/Security/Server_Side_TLS#RC4_weaknesses might be out of date now?  There seem to be non-RC4-related inconsistencies between it and the Recommended Ciphersuite.  In order to stay up to date as the Recommended Ciphersuite changes, would it be better to give instructions on how to replace RC4 with 3DES in the Recommended Ciphersuite?  Is it more complicated than just replacing "RC4" with "DES-CBC3" and "!3DES" with "!RC4"?


== Prioritzation logic and ciphersuite recommendation ==
== Prioritzation logic and ciphersuite recommendation ==
2

edits