News for hackers. Stuff that matters.

A comment on Single C file TLS 1.2/1.3 implementation using tomcrypt. Parent comment

Re:Single C file TLS 1.2/1.3 implementation using tomcrypt by iforgotpassword on Sunday January 06, 2019 @06:09PM (#18841344)
Sorry, I probably should have been more explicit. I was also referring to the part where they suggested disabling weak ciphers, like explicitly stated in GP, RSA. That's what caused problems for me.
[ Parent | on HN ]
Re:Single C file TLS 1.2/1.3 implementation using tomcrypt by lousken on Sunday January 06, 2019 @07:06PM (#18841621)
That depends on what do you consider as a weak cipher, I do have security.ssl3.rsa_des_ede3_sha set to false in Firefox as well. If you mean all ciphers that don't have forward secrecy then I guess it may broke a lot more.

edit: i also have security.ssl3.rsa_aes_256_sha disabled, so my only non forward secrecy cipher fallback is TLS_RSA_WITH_AES_128_CBC_SHA

[ Parent | on HN ]
Re:Single C file TLS 1.2/1.3 implementation using tomcrypt by dependenttypes on Monday January 07, 2019 @02:46AM (#18843510)
I would suggest to avoid disabling ciphers in your browser as it can damage your privacy.
[ Parent | on HN ]