[Ach] Cipher-Order: AES128/AES256 - was: Secure E-Mail Transport based on DNSSec/TLSA/DANE
azet at azet.org
Mon Nov 9 12:57:31 CET 2015
Torsten Gigler wrote:
> I'd like to suggest to discuss about the policy of selecting the ciphers and bringing them into a
> proposed order, when discussing about a new cipher string.
> This is about like Gunnar wrote today. The String building is a different issue...
> Well, my favorite 2 cents about the policy could be found here:
> E.g. I'd favor GCM over CBC regardless of the cipher size (of the same algorithm).
It's actually not that easy. While some recent attacks against TLS work
well for HTTP - most of them would not work well with other application
back data en mass.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 801 bytes
Desc: OpenPGP digital signature
More information about the Ach