4 ms·
> If you're still using or accepting RC4 anywhere for any reason (ahem, Mozilla, Google, Microsoft?), for heaven's sake, get your arses in gear. Amazon AWS sig
by noinsight 11y ago
> If you're still using or accepting RC4 anywhere for any reason (ahem, Mozilla, Google, Microsoft?), for heaven's sake, get your arses in gear.
Amazon AWS signup, as of last night?
http://i.imgur.com/Wq0lnnR.png http://i.imgur.com/Wq0lnnR.png
- wolf550e 11y agohttps://www.ssllabs.com/ssltest/analyze.html?d=portal.aws.amazon.com https://www.ssllabs.com/ssltest/analyze.html?d=portal.aws.am... If your TLS client tried stronger cipher suites before weaker ones (which only MSIE does, and it considers only RC4 weak), you can get TLS 1.0 with RSA key exchange, AES-256-CBC encryption, HMAC-SHA1 authentication with that server. That's not secure (only TLS 1.2 with PFS and AEAD is secure).