Re:Good fun with bad crypto
by valarauca1 on Thursday January 16, 2014 @10:09AM
(#7069727)
Funny the blog post is about bad crypto and its all they support.
Funny how I had just disabled RC4 and DES in my browser...
I wonder how can that be your only supported crypto in 2014!
For a while, RC4 was recommended because it's immune to the BEAST attack.
Re:Good fun with bad crypto
by valarauca1 on Thursday January 16, 2014 @02:14PM
(#7071800)
A new theoretical attack was published in 2013 that showed that RC4 was still weak in TLS. While the attack was more academic, it did raise questions of what else would be possible.
We often forget that RC4 is a fundamentally broken algorithm.
TLS_RSA_WITH_RC4_128_SHA
Too bad they cant correctly set up their servers ...