3 ms·
Agreed but I have found customers with TLS_DH_anon_WITH_RC4_128_MD5 enabled for example. =( It's much more likely for a vulnerability with WP code than with ci
by newman314 15y ago
Agreed but I have found customers with TLS_DH_anon_WITH_RC4_128_MD5 enabled for example. =(
It's much more likely for a vulnerability with WP code than with cipher but I just wanted to point out the importance of properly setting ciphers. Besides with AES-NI avail, it's much less CPU intensive so another win.
- tptacek 15y agoThat ciphersuite has no viable attacks. Many sites switched to RC4 recently to deal with browser susceptibility to CBC repeated-IV problems.