[Ach] DROWN Attack

[L. Aaron Kaplan]

> Hi


> On 01.03.2016, at 20:14, Torge Riedel <torgeriedel at gmx.de> wrote:
> 
> Hi list,
> 
> is it worth to add/merge recommendations from
> 
> https://drownattack.com/
> 
> to the ACH configuration?

It pretty much is already thereand more importantly - already was :)

The only minor clarification is in the MTA section and I am working on it tonight. 

In other words: it is good to see that our recommendations still hold against new attacks. 
Good sign. 

---
Mobile


> 
> Related article (in German): http://www.heise.de/newsticker/meldung/DROWN-Angriff-SSL-Protokoll-aus-der-Steinzeit-wird-Servern-zum-Verhaengnis-3121121.html?wt_mc=rss.ho.beitrag.atom
> 
> I apologize if ACH configuration is already up-to-date, I didn't checked. Too busy.
> 
> Regards
> Torge
> _______________________________________________
> Ach mailing list
> Ach at lists.cert.at
> http://lists.cert.at/cgi-bin/mailman/listinfo/ach
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/ach/attachments/20160301/9793eac4/attachment.html>