3 ms·

sslscan --no-failed youtube.com: Supported Server Cipher(s): Accepted SSLv3 256 bits ECDHE-RSA-AES256-SHA Accepted SSLv3 256 bits AES256-SHA

by vilda 12y ago

sslscan --no-failed youtube.com: Supported Server Cipher(s): Accepted SSLv3 256 bits ECDHE-RSA-AES256-SHA Accepted SSLv3 256 bits AES256-SHA Accepted SSLv3 168 bits ECDHE-RSA-DES-CBC3-SHA Accepted SSLv3 168 bits DES-CBC3-SHA Accepted SSLv3 128 bits ECDHE-RSA-AES128-SHA Accepted SSLv3 128 bits AES128-SHA Accepted SSLv3 128 bits ECDHE-RSA-RC4-SHA Accepted SSLv3 128 bits RC4-SHA Accepted SSLv3 128 bits RC4-MD5 Accepted TLSv1 256 bits ECDHE-RSA-AES256-SHA Accepted TLSv1 256 bits AES256-SHA Accepted TLSv1 168 bits ECDHE-RSA-DES-CBC3-SHA Accepted TLSv1 168 bits DES-CBC3-SHA Accepted TLSv1 128 bits ECDHE-RSA-AES128-SHA Accepted TLSv1 128 bits AES128-SHA Accepted TLSv1 128 bits ECDHE-RSA-RC4-SHA Accepted TLSv1 128 bits RC4-SHA Accepted TLSv1 128 bits RC4-MD5 Prefered Server Cipher(s): SSLv3 128 bits ECDHE-RSA-RC4-SHA TLSv1 128 bits ECDHE-RSA-RC4-SHA Seems like a problem in cipher ordering?

sitkack 12y ago
If I remove any support for RC4 under chrome, no videos will play. Youtube itself will load, but no video using either flash or html5. Confirmed with FIrefox Aurora as well.
sitkack 12y ago
You need to be looking at the sites serving the video ( r4---sn-nx57yn7k.googlevideo.com ) not the player itself. https://gist.github.com/anonymous/793efa92b17c8f727a1f https://gist.github.com/anonymous/793efa92b17c8f727a1f I used https://github.com/DinoTools/sslscan https://github.com/DinoTools/sslscan instead of the one that ships with homebrew. My favorite preferred cipher is SSLv2 0 bits (NONE) I try and use that whenever I can.