-
@aprilmpls @chrismckee XP must die. And service MUST work on upgrading their users. Because CBC doom is not far !
-
@aprilmpls @chrismckee I see at least 3 majors TLS changes with really painfull compatibility troubles the next years : SHA-1, TLS1.2, CBC…
-
@aprilmpls @chrismckee Any of those require very recent user-agent. And I guess there will be at least 1 on the next year.
-
@aprilmpls @chrismckee (I expect CBC the first, currently we are running against counter-measures to protect from padding oracle)
-
@aprilmpls @chrismckee So in few monthes, minimal security will be tls.imirhil.fr/suite/EECDH+AESGCM. Cry :D
-
@aprilmpls @chrismckee And this requires TLS1.2 only (no support of AEAD in 1.0 and 1.1)
aeris22’s Twitter Archive—№ 38,158