News for hackers. Stuff that matters.

A comment on Fighting Cargo Cult – An Incomplete SSL/TLS Bookmark Collection. Parent comment

Re:Fighting Cargo Cult – An Incomplete SSL/TLS Bookmark Coll... by danimo on Monday April 21, 2014 @10:28AM (#7621188)
That's an excellent reference with good explanations. I'll add it to the list to get away from the strong Ivan bias :-). The reason why I had A- only is that my openssl (Debian) doesn't seem provide all the ciphers required.
[ Parent | on HN ]
Re:Fighting Cargo Cult – An Incomplete SSL/TLS Bookmark Coll... by puetzk on Wednesday April 23, 2014 @10:13PM (#7638159)
It's probably your apache, actually; 2.2 can't do ECDHE, even though the openssl in Debian 7 can.

Sadly, this means IE doesn't get forward secrecy, because it can't do do DHE with RSA keys, only DSS.

[ Parent | on HN ]