Tag Info

New answers tagged

1

Torrent clients offer encryption of traffic using RC4, and people consider this, like, very safe to hide traffic information from ISP. People are wrong to do so, but not because RC4 is even remotely the weak point. Simply knowing which IPs you're connecting to allows precise determination of the torrent you are downloading by an opponent who simply ...


3

Disabling RC4 completely would be great in an ideal world, but unfortunately we don't live in an ideal world. If you do disable it, certain mobile and embedded devices may not be able to communicate with you. Keep in mind that IE on Windows XP can only use RC4 because the underlying cryptographic API (CAPI) on the system doesn't have AES. As for the risk, ...


2

I think you're asking the wrong question. To me, "How much will my users be inconvenienced?", is far less important than "How sensitive is the information on this server?", or "How much would I care if it got hacked?". Hardening a system usually leads to some inconvenience. The level of inconvenience you're willing to endure (and inflict on your users) ...


0

RC4 has been proven to be broken so is probably a sensible thing to disable it from a webserver. You shouldn't bother to keep it on just to provide access to obsolete web browsers - after all, they're called obsolete for a reason, and giving the visitor incentives to upgrade his old browser is good.


0

cipher suites have well understood security properties such as TLS RSA WITH RC4 128 SHA that uses RSA for key exchange, 128-bit RC4 for bulk encryption, and SHA for hashing. on the other hand: The BEAST attack is an old academic weaknesses which has recently been demonstrated to be applicable in practice. It requires that the attacker spies on the link and ...


3

The overall cipher suite determines compatibility, not the presence or absence of one cipher. You'll need to test different configurations to find out. If you're already doing SSL Lab's server test, then that's your best resource for determining the impact of the change. When you say you're setting up some new certificates and load balancers that ...



Top 50 recent answers are included