4 ms·
Yes, the cloudflare advice does break chrome PFS. With the defaults, chrome shows: CAMELLIA_256_CBC, with SHA1 for message authentication and DHE_RSA
by jcampbell1 13y ago
Yes, the cloudflare advice does break chrome PFS. With the defaults, chrome shows:
CAMELLIA_256_CBC, with SHA1 for message
authentication and DHE_RSA as the
key exchange mechanism.
By changing to the suggestion in the comments, the encryption downgrades to:
The connection is encrypted using RC4_128,
with SHA1 for message authentication and
RSA as the key exchange mechanism.
- dfc 13y agoYeah, I actually just noticed that cloudflare was using nginx so the qualys scan was not indicative of the cloudflare apache setup. I apologize I got distracted watching those genetic cars.