3 ms·

I don't see any GCM ciphers nor ECDHE/DHE key exchanges deployed on this site, so forward secrecy and authenticated encryption are not implemented and supported

I don't see any GCM ciphers nor ECDHE/DHE key exchanges deployed on this site, so forward secrecy and authenticated encryption are not implemented and supported by the Not Quite So Broken toolchain? It would be a project of great value if those are implemented, plain RSA and CBC is pretty much dead in TLS nowadays...

throwawayocamlx 8y ago
- "(ECB/CBC/CCM/CTR/GCM)" -> GCM is implemented in the nocrypto library. - TLSv1.2 and thus GCM and DHE are supported (and default). - TLSv1.3 is in the works as we speak (which implies ECDHE), check back in a few months.