News for hackers. Stuff that matters.
Re:Mozilla SSL Configuration Generator by tootie on Friday April 10, 2015 @12:39PM (#9355480)
This should be called HTTPS confuration generator. SSL was deprecated years ago.
Re:Mozilla SSL Configuration Generator by nailer on Friday April 10, 2015 @12:55PM (#9355582)
It should, or 'TLS/SSL'. But so many people - even in tech - still use 'SSL' as a synonym for 'PKI on the web' that it's better to be understood than correct (and yes it's a bit sad).

Also: SSLv3 and TLSv1 are very similar: http://tim.dierks.org/2014/05/security-standards-and-name-ch...

Re:Mozilla SSL Configuration Generator by hsivonen on Friday April 10, 2015 @01:05PM (#9355659)
When the IETF renames things, everyone is going to have a bad time. See also URI and IRI.
Re:Mozilla SSL Configuration Generator by nocman on Friday April 10, 2015 @02:04PM (#9356033)
Wow, I've never even heard of IRI.

Guess that proves your point :-D

Re:Mozilla SSL Configuration Generator by tootie on Friday April 10, 2015 @01:24PM (#9355785)
I think HTTPS has more name recognition than SSL.
Re:Mozilla SSL Configuration Generator by e1ven on Friday April 10, 2015 @01:39PM (#9355879)
Each of the tools involved refer to their the overall https configuration as SSL. Even if it's not the protocol which is being used, it's a reasonable choice for the tool name.

Apache

SSLProtocol all -SSLv2 -SSLv3 -TLSv1

SSLCipherSuite ECDHE-RSA-AES1....

Nginx

ssl_protocols TLSv1.1 TLSv1.2;

ssl_ciphers 'ECDHE-RSA-AES....'

HAProxy

ssl-default-bind-ciphers ECDHE-RSA-....