Security : Abrowser & Icecat SSL Check & Insecure Cipher Suite Test
- Vous devez vous identifier ou créer un compte pour écrire des commentaires
I'm runnning Icedove version 31.5.0 on GnewSense Ucclia
the result of How's my SSL & Cipher suite is bad
insecure cipher suites make it easy for attackers to decrypt data on tapped lines, or make it easy for the attacker to pretend to be the website, stealing secrets directly from the client. Cipher suites are found here for one of many reasons. Insecure cipher suites are only a problem if the server also supports it. Of course, some of these suites don't require the server to prove that they can serve the traffic for the site they claim to, making them easy to man-in-the-middle
May Abrowser & IceCat users test:
https://www.howsmyssl.com/
https://blog.dbrgn.ch/2014/1/8/improving_firefox_ssl_tls_security/
Shouldn't you be posting this to gnewsense? For me (still on tris 6) it says all is fine. My profile is heavily modified but also a virgin abrowser profile gets all good results.
Yes I have notified GnewSense,
Actually the latest Icedove is version 38.4.01 of which am about to install.
Glad to know Abrowser gets good results ;-)
The issue is not the Version 3 of SSL
about:config security.ssl3.rsa_fips_des_ede3_sha
is disabled by default
But several Insecure Cipher Suites
- Vous devez vous identifier ou créer un compte pour écrire des commentaires