<html><body><div>Hi everyone,</div><div><br></div><div>right now I'm building a lab environment to test the BetterCrypto configuration B.</div><div>I found that Mircosoft does not support all ciphers e.g Camelia.</div><div>In the following msdn article you can see the supported ciphers.</div><div><a href="http://msdn.microsoft.com/en-us/library/windows/desktop/aa374757(v=vs.85).aspx">http://msdn.microsoft.com/en-us/library/windows/desktop/aa374757(v=vs.85).aspx</a></div><div><br></div><div>So here is, what i think, comes close to our prefered configuration.</div><div><br></div><div><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;">+TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P384</p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">+TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P256</span></p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;">+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384_P384</p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">+TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P256</span></p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;">+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P384</p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;">+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P256</p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">+TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P384</span></p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;">+TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P256</p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;">+TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384</p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;">+TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P256</p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;">+TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256</p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;">+TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P384</p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">+TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">+TLS_RSA_WITH_AES_256_CBC_SHA256</span></p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">+TLS_RSA_WITH_AES_256_CBC_SHA</span></p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;">+TLS_RSA_WITH_AES_128_CBC_SHA256</p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;">+TLS_RSA_WITH_AES_128_CBC_SHA</p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;"><br></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-TLS_DHE_DSS_WITH_AES_128_CBC_SHA256</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-TLS_DHE_DSS_WITH_AES_128_CBC_SHA</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-TLS_DHE_DSS_WITH_AES_256_CBC_SHA256</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-TLS_DHE_DSS_WITH_AES_256_CBC_SHA</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-TLS_RSA_WITH_RC4_128_MD5</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-SSL_CK_RC4_128_WITH_MD5</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-SSL_CK_DES_192_EDE3_CBC_WITH_MD5</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-TLS_RSA_WITH_NULL_SHA256</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-TLS_RSA_WITH_NULL_SHA</span></p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-TLS_RSA_WITH_RC4_128_SHA</span></p><p style="margin: 0px; color: rgb(69, 69, 69); padding-bottom: 0px; line-height: 1.429em !important;"><span style="line-height: 1.429em;">-TLS_RSA_WITH_3DES_EDE_CBC_SHA</span></p><p style="color: rgb(69, 69, 69); margin: 0px; padding-bottom: 0px; line-height: 1.429em !important;"><br></p></div><div><span style="line-height: 1.5;">Please give me your feedback to confirm the configuration.</span></div><div><span style="font-family: 'Helvetica Neue', Helvetica, Arial, Verdana, sans-serif; white-space: pre-wrap; line-height: 1.5;"><br></span></div><div><span style="font-family: 'Helvetica Neue', Helvetica, Arial, Verdana, sans-serif; white-space: pre-wrap; line-height: 1.5;">Mit freundlichen Grüßen</span></div><div><pre style="font-family: 'Helvetica Neue', Helvetica, sans-serif; font-size: 15px; white-space: pre-wrap; word-wrap: break-word;" data-mce-style="font-family: 'Helvetica Neue', Helvetica, sans-serif; font-size: 15px; white-space: pre-wrap; word-wrap: break-word;">
Andreas Mirbach
Zum Römersprudel 101
54294 Trier
+49 160 94980084</pre></div></body></html>