Talk:Security/Server Side TLS: Difference between revisions
Jump to navigation
Jump to search
(→Page protection: new section) |
(→RC4) |
||
| Line 4: | Line 4: | ||
== RC4 == | == RC4 == | ||
Full discussion: https://bugzilla.mozilla.org/show_bug.cgi?id=927045 | |||
RC4-based ciphers '''ought to be completely removed''' from the list, better attacks are coming like this one: https://www.usenix.org/conference/usenixsecurity13/security-rc4-tls' | RC4-based ciphers '''ought to be completely removed''' from the list, better attacks are coming like this one: https://www.usenix.org/conference/usenixsecurity13/security-rc4-tls' | ||
Revision as of 22:03, 18 October 2013
Sources: https://jve.linuxwall.info/blog/index.php?post/2013/10/12/A-grade-SSL/TLS-with-Nginx-and-StartSSL https://www.insecure.ws/2013/10/11/ssltls-configuration-for-apache-mod_ssl/
RC4
Full discussion: https://bugzilla.mozilla.org/show_bug.cgi?id=927045
RC4-based ciphers ought to be completely removed from the list, better attacks are coming like this one: https://www.usenix.org/conference/usenixsecurity13/security-rc4-tls'
Page protection
This wiki page is protected against changes. Changes must be discussed in this section beforehand. If you have any comments, please leave them here.