4 ms·
If you're an administrator of a website and you actually care about this, your priorities should be at least implementing proper HTTPS support before placing a
by jzelinskie 13y ago
If you're an administrator of a website and you actually care about this, your priorities should be at least implementing proper HTTPS support before placing a linked image to the EFF on your website.
- willvarfar 13y agoWith forward secrecy. Oh, and don't use a block cipher because of attacks. Oh, and don't use RC4 because of .. attacks. Oh bugger.
- swordswinger12 13y agoUse whatever you want as long as you get an experienced cryptographer to implement it. Even RC4 can be secure if used properly.
- willvarfar 13y agoAnd does TLS use RC4 correctly? Oh...
- lonnyk 13y agoWould you mind elaborating on these problems? I assume all of the 'Oh's mean it is broken?
- agwa 13y agohttp://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.html http://blog.cryptographyengineering.com/2013/03/attack-of-we... It's possible to implement RC4 "correctly" (as far as we know) by discarding the first several thousand bytes of the keystream, but TLS doesn't do this.
- Hello71 13y agoTurn off SSL 3.0 and TLS 1.0. Problem solved for all known attacks. Unfortunately, that includes your users.