nanog mailing list archives

Re: SEC webpages inaccessible due to Firefox blocking servers with weak DH ciphers


From: Michael O Holstein <michael.holstein () csuohio edu>
Date: Fri, 17 Jul 2015 19:14:17 +0000

making 99% of the web secure is better than keeping an old 1% working

A fine idea, unless for $reason your application is among the 1% .. nevermind the arrogance of the "I'm sorry Dave" 
sort of attitude.

As an example .. we have a vendor who, in the current release (last 3 months) still requires "weak" ciphers in 
authentication responses. That was mostly okay until another vendor (with more sense) wanted to auth the same way but 
only permitted strong ciphers. 

My $0.02

Michael Holstein
Cleveland State University

Current thread: