3 ms·
THIS I disabled all the broken crypto (RC4, RSA handshake) in my browser few months ago and everything was fine for a while. Then about 2-3 months ago Youtube\
by rasz_pl 13y ago
THIS
I disabled all the broken crypto (RC4, RSA handshake) in my browser few months ago and everything was fine for a while. Then about 2-3 months ago Youtube\gmail started demanding RC4.
Another "funny" example of this was oculusvr.com
oculusvr.com/order/
redirects to
https://www.oculusvr.com/order/ https://www.oculusvr.com/order/
requires RC4 and RSA, doesnt like diffiehelman and AES
BUT https://support.oculusvr.com/home https://support.oculusvr.com/home
less critical part of the site works with more secure AES/DH
So the part of the site that deals with confidential data and money defaults to BROKEN crypto, while bugtracker works fine with secure crypto. W T F????
- mnutt 13y agoTheir support site is most likely hosted by Zendesk, who have a different configuration.