News for hackers. Stuff that matters.
Re:Keyless SSL: The Nitty Gritty Technical Details by rakoo on Friday September 19, 2014 @08:47AM (#8340211)
From the user POV, nothing is changed. The decision to deprecate SHA1 or not isn't specific to Keyless SSL (ie, Keyless SSL isn't a new product for the users)

From the bank's point of view, where we can say that Keyless SSL is a new product, only 2 cipher suites are allowed:

    ECDHE-ECDSA-AES256-GCM-SHA384
    ECDHE-RSA-AES256-GCM-SHA384
which, as you can see, don't include sha1.

There are no comments on this comment yet.