4 ms·

HTTPS is fine, it's just all the x509 surrounding it that people are upset about

• dchest 13y ago
  No, it's not fine. Currently the only secure version of TLS is 1.2 with AES-GCM; and it's still not deployed widely.
  • timclassic 13y ago
    Can you provide some more details for this claim? I'm interested.
    • dchest 13y ago
      Sure, https://en.wikipedia.org/wiki/Transport_Layer_Security#Attacks_against_TLS.2FSSL https://en.wikipedia.org/wiki/Transport_Layer_Security#Attac... https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what https://community.qualys.com/blogs/securitylabs/2013/03/19/r...
  • oakwhiz 13y ago
    I stand corrected