aeris22’s avataraeris22’s Twitter Archive—№ 38,181

  1. …in reply to @jvehent
    @jvehent @chrismckee @aprilmpls Totally false. You can downgrade to EXPORT even if the browser don’t support it. youtu.be/TfK5tf3ScR4?t=1583
    1. …in reply to @aeris22
      @jvehent @chrismckee @aprilmpls (Yep, TLS is a messy craps :P)
      1. …in reply to @aeris22
        @jvehent @chrismckee @aprilmpls With this kind of attack, the only way to avoid downgrade it to have ONLY secure support BOTH sides.
        1. …in reply to @aeris22
          @jvehent @chrismckee @aprilmpls If ANY of the sides support ANY weak cipher, downgrade is possible. Even if the other side doesn’t.