Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I force my Chrome broswer (or even Firefox) to always use a higher security encryption?, for example 256bit (or more) encryption when using https. I guess it should be some flag to force the negotiation. I know it also depends on the other side of the connection. I'm using Windows 7.


share|improve this question

As indicated in this answer, you can blacklist some SSL/TLS cipher suites with a command-line argument. Use SSL Labs client test to see what your browser is currently supporting, then close it and launch it again from the command-line with all the cipher suites you don't like deactivated.

Of course, not supporting some cipher suites may imply not being able to connect with some sites. For a SSL connection to succeed, both client and server must have at least one cipher suite they both support.

Also, 128 bits for symmetric keys are fine. Requiring "the biggest keys" is like buying a truck because you think that bigger cars are always better, and a 40-ton truck is undoubtedly bigger than a car. The next time you have to park your truck or pay for gas, you might somehow modify your opinion...

share|improve this answer
What about enabling QUIC and SPDY/4 flags? – skan Sep 28 '13 at 12:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.