[146661] in cryptography@c2.net mail archive
Re: [Cryptography] People should turn on PFS in TLS
daemon@ATHENA.MIT.EDU (Ben Laurie)
Fri Sep 6 13:20:30 2013
X-Original-To: cryptography@metzdowd.com
In-Reply-To: <20130906131344.036c8e9a@jabberwock.cb.piermont.com>
Date: Fri, 6 Sep 2013 18:18:05 +0100
From: Ben Laurie <ben@links.org>
To: "Perry E. Metzger" <perry@piermont.com>
Cc: =?ISO-8859-1?Q?Rapha=EBl_Jacquot?= <sxpert@sxpert.org>,
Cryptography Mailing List <cryptography@metzdowd.com>
Errors-To: cryptography-bounces+crypto.discuss=bloom-picayune.mit.edu@metzdowd.com
--===============2752589413398884629==
Content-Type: multipart/alternative; boundary=001a11340566c46a3904e5ba38ce
--001a11340566c46a3904e5ba38ce
Content-Type: text/plain; charset=ISO-8859-1
On 6 September 2013 18:13, Perry E. Metzger <perry@piermont.com> wrote:
> Google is also now (I believe) using PFS on their connections, and
> they handle more traffic than anyone. A connection I just made to
> https://www.google.com/ came out as, TLS 1.2, RC4_128, SHA1,
> ECDHE_RSA.
>
> It would be good to see them abandon RC4 of course, and soon.
>
In favour of what, exactly? We're out of good ciphersuites.
--001a11340566c46a3904e5ba38ce
Content-Type: text/html; charset=ISO-8859-1
<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On 6 September 2013 18:13, Perry E. Metzger <span dir="ltr"><<a href="mailto:perry@piermont.com" target="_blank">perry@piermont.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Google is also now (I believe) using PFS on their connections, and<br>
they handle more traffic than anyone. A connection I just made to<br>
<a href="https://www.google.com/" target="_blank">https://www.google.com/</a> came out as, TLS 1.2, RC4_128, SHA1,<br>
ECDHE_RSA.<br>
<br>
It would be good to see them abandon RC4 of course, and soon.<br></blockquote><div><br></div><div>In favour of what, exactly? We're out of good ciphersuites.</div><div><br></div></div></div></div>
--001a11340566c46a3904e5ba38ce--
--===============2752589413398884629==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
The cryptography mailing list
cryptography@metzdowd.com
http://www.metzdowd.com/mailman/listinfo/cryptography
--===============2752589413398884629==--
