News for hackers. Stuff that matters.

A comment on Nginx doesn't suck at SSL after all. Parent comment

Re:Nginx doesn't suck at SSL after all by tptacek on Wednesday July 13, 2011 @03:43PM (#2760337)
"Patchy security"? What are you on about?
[ Parent | on HN ]
Re:Nginx doesn't suck at SSL after all by burgerbrain on Wednesday July 13, 2011 @11:08PM (#2761597)
I'm refering to the portion of the comment I was responding to: "These "financial secrets" are emailed in the clear after every transaction"

The implication being that since they were sending the information in the clear in a separate part of their system, that they were wrong in configuring their https site as they did. I object to that conclusion.

[ Parent | on HN ]
Re:Nginx doesn't suck at SSL after all by tptacek on Wednesday July 13, 2011 @11:17PM (#2761614)
Ah. Patchy works there. I'm sorry about that. Having a hairtrigger day.
[ Parent | on HN ]
Re:Nginx doesn't suck at SSL after all by burgerbrain on Wednesday July 13, 2011 @11:19PM (#2761619)
No worries!
[ Parent | on HN ]
Re:Nginx doesn't suck at SSL after all by beachaccount on Thursday July 14, 2011 @08:32AM (#2762714)
No, that indicates that these were not actually financian secrets, hence the quotes.
[ Parent | on HN ]
Re:Nginx doesn't suck at SSL after all by burgerbrain on Thursday July 14, 2011 @01:18PM (#2763931)
I'm going to go ahead and give the developers of the particular site the benefit of the doubt and not you, if you don't mind.

Furthermore, one particular site using https in a particular mode when they don't need to use https at all is still not a logical argument against other sites using https with those ciphers.

[ Parent | on HN ]