News for hackers. Stuff that matters.

A comment on Why isn't HTTPS everywhere yet?. Parent comment

Re:Why isn't HTTPS everywhere yet? by brians on Tuesday January 19, 2016 @08:39AM (#10930608)
That does happen! Enable TLS 1.2 only and you're in pretty good shape. TLS 1.3 will drop more bad stuff and add a bit more good stuff.
[ Parent | on HN ]
Re:Why isn't HTTPS everywhere yet? by stealthyb on Tuesday January 19, 2016 @10:31AM (#10931350)
It definitely helps, but if you're trying to keep up with the latest security, you'd be susceptible to Logjam (due to DHE-supporting ciphers in the default TLS 1.2 list).

There's the Mozilla SSL Configuration Generator which helps with the madness, but they still aren't keeping up with the latest recommendations.

[ Parent | on HN ]