aeris22’s avataraeris22’s Twitter Archive—№ 38,161

            1. …in reply to @CubicleApril
              @aprilmpls @chrismckee XP must die. And service MUST work on upgrading their users. Because CBC doom is not far !
          1. …in reply to @aeris22
            @aprilmpls @chrismckee I see at least 3 majors TLS changes with really painfull compatibility troubles the next years : SHA-1, TLS1.2, CBC…
        1. …in reply to @aeris22
          @aprilmpls @chrismckee Any of those require very recent user-agent. And I guess there will be at least 1 on the next year.
      1. …in reply to @aeris22
        @aprilmpls @chrismckee (I expect CBC the first, currently we are running against counter-measures to protect from padding oracle)
    1. …in reply to @aeris22
      @aprilmpls @chrismckee So in few monthes, minimal security will be tls.imirhil.fr/suite/EECDH+AESGCM. Cry :D
  1. …in reply to @aeris22
    @aprilmpls @chrismckee And this requires TLS1.2 only (no support of AEAD in 1.0 and 1.1)