[Ach] [SSL Observatory] A TLS protocol level scan of the Alexa top 1, 000, 000

szebi szebi at gmx.at
Sun Jan 12 20:18:13 CET 2014


On 01/12/2014 07:54 PM, Aaron Zauner wrote:
> He is, remember the discussion he refered us to on the mozilla crypt
> mailing list? :)
>
> BTW. I still do not agree that we need backwards compatibility to the
> middle ages of computing. That simply does not put people into the
> position that they HAVE to upgrade their systems. I'm also unsure why
> Firefox now serves TLS 1.2 but it's disabled by default. Thats a very
> confusing choice because it's not even simple to enable it for a
> generic desktop user.
That would be typical content for "Applied Cryptography for Endusers" :)

https://en.wikipedia.org/wiki/Transport_Layer_Security#Web_browsers has
an overview over the implementations (and if they are enable/disabled)
of TLS in webbrowsers.
>
> Aaron
>
>
> On Sun, Jan 12, 2014 at 7:38 PM, L. Aaron Kaplan <kaplan at cert.at
> <mailto:kaplan at cert.at>> wrote:
>
>
>     On Jan 12, 2014, at 7:32 PM, Aaron Zauner <azet at azet.org
>     <mailto:azet at azet.org>> wrote:
>
>     > By the way, you should check out Juliens GitHub account too. It
>     has a lot of useful tools related to our topic that could be
>     useful: https://github.com/jvehent?tab=repositories
>     >
>     Just doing that right now. That's really fantastic! Congrats
>     Julien in case you are on this list.
>
>     This will really help in measuring the change to better crypto
>     settings.
>
>     a.
>
>     ---
>     // L. Aaron Kaplan <kaplan at cert.at <mailto:kaplan at cert.at>> - T:
>     +43 1 5056416 78 <tel:%2B43%201%205056416%2078>
>     // CERT Austria - http://www.cert.at/
>     // Eine Initiative der nic.at <http://nic.at> GmbH -
>     http://www.nic.at/
>     // Firmenbuchnummer 172568b, LG Salzburg
>
>
>
>
>
>
>
> _______________________________________________
> Ach mailing list
> Ach at lists.cert.at
> http://lists.cert.at/cgi-bin/mailman/listinfo/ach


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 901 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/ach/attachments/20140112/ab4d421a/attachment.sig>


More information about the Ach mailing list