4 ms·
Site only supports TLS 1.1 (not TLS 1.2), only 1 cypher is available for use TLS_RSA_WITH_RC4_128_SHA (0x5)
by valarauca1 12y ago
Site only supports TLS 1.1 (not TLS 1.2), only 1 cypher is available for use
TLS_RSA_WITH_RC4_128_SHA (0x5)
- jackpirate 12y agoWhy is this bad?
- valarauca1 12y ago1) RC4 is broken. 2) TLS 1.1 is nearly 4 years out of date. The fact that the site only uses RC4 shows that the site's manager understands the BEAST attack (as BEAST could attask TLS1.1 that weren't RC4). Yet simply doesn't care about the CRIME attack, or that RC4 is completely cryptographically defunct. If you transfer a static document over RC4 changing keys constantly, you can actually average which bits are high and low, and get the clear text.