3 ms·

I've tweaked my Apache configuration but don't seem to be able to trigger a rescan--the cipher list doesn't appear to change. I guess it's cached for a little w

by yrro 12y ago

I've tweaked my Apache configuration but don't seem to be able to trigger a rescan--the cipher list doesn't appear to change. I guess it's cached for a little while, but the UI doesn't make that clear. Also, it's flagging the following ciphers: ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA These are triple-DES though, rather than just single DES. Is that considered weak these days?

nuxi7 12y ago
They have 112-bits of security and are considered fine until 2030 by NIST. (insert opinion of NIST here) The real reason to disable them is because of how slow they are. The only thing that is gonna actually use 3DES for TLS is MSIE on XP, its the last remaining secure cipher.