-
@jvehent @aprilmpls SHA-1 is *NOT* weak for HMAC. Only for sign and auth. schneier.com/blog/archives/2005/02/sha1_broken.htmlOn twitter.com
❤️ 1 Favorite
Mood +2 🙂
-
@jvehent @aprilmpls And currently, SHA-1 is not removable without troubles. And everybody will implement your intermediate, which is weak…Permalink On twitter.com
❤️ 1 Favorite
Mood -2 🙁
-
@jvehent @aprilmpls Modern : tls.imirhil.fr/suite/ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256 Huge compatibility problemPermalink On twitter.com
Mood -1 🙁
-
@jvehent @aprilmpls Intermediate : tls.imirhil.fr/suite/ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS Security concerns, and more in few monthes.Permalink On twitter.com
♻️ 1 Retweets
Mood 0
-
@jvehent @aprilmpls tls.imirhil.fr/suite/EECDH+AES:EECDH+CHACHA20 What you really want to achieve in production todayPermalink On twitter.com
❤️ 1 Favorite
Mood +1 🙂
-
@jvehent @aprilmpls There is no more decent reason to not use this suite. And more no more since the death of 3DES :PPermalink On twitter.com
Mood -4 🙁