Re: Fedora crypto policy vs the real world Was: available crypto policies

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Eric H. Christensen wrote:
> On Mon, May 05, 2014 at 11:50:48AM +0200, Nikos Mavrogiannopoulos wrote:
>> On Fri, 2014-04-25 at 10:34 -0400, Hubert Kario wrote:
>>> SSL/TLS survey of 305280 websites from Alexa's top 0.97 million
>>> Stats only from connections that did provide valid certificates
>>> (or anonymous DH from servers that do also have valid certificate installed)
>>> RC4 Only                  5418      1.7748
>> That's pretty interesting. The question is now how important is that RC4
>> only segment. Is that percentage significant enough to revise having RC4
>> in the "default" crypto profile set?
> 
> Revise how?  RC4 should be dropped down to EXPORT status, IMO, but somehow lives on.
> 
+1. Not quite sure why it's still in the TLS 1.3 draft.

Aaron

Attachment: signature.asc
Description: OpenPGP digital signature

--
security mailing list
security@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/security

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Coolkey]

  Powered by Linux