4 ms·

Anyone have a way to fix up Safari on OS X 10.11?

• valarauca1 11y ago
  You can't fix this on the client side, but on the server side.
  • vitd 11y ago
    I'm confused. They included instructions for updating Firefox and Chrome (web browser clients) to remove support for the older cipher suites. I was asking if there was a way to do the same for Safari.
  • thephyber 11y ago
    Please read the article before posting. There _are_ some things that can be done client side to raise the minimum level of encryption, although not to raise the maximum level of encryption. One tactic the NSA and at least one vendor are suspected to use is to inject/drop a header which prevents the client and server of an SSL/TLS connection from settling on the highest level of encryption that both the client and server have. In this case, it's best for your client to disable the weakest forms of SSL/TLS encryption which raises the minimum level of encryption of the connection. That's what much of this EFF article describes, although it fails to describe these steps for browsers other than Firefox and Chrome.
• yuhong 11y ago
  I think Safari may already have disabled DHE.