Timeline for Is connection established with two way SSL as secure as SSH?
Current License: CC BY-SA 4.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 1, 2019 at 3:04 | comment | added | Jayesh Sahu | Thanks Dave, Your comments clears many doubts. I am analyzing the security aspect of two way SSL and I will correct EDH cipher thing. My description is not clear because I was just trying to find out the risk and could not find exact comparison on google. | |
| Jul 31, 2019 at 6:41 | comment | added | dave_thompson_085 | If you force TLS 1.3 you don't have to worry about renegotiation, because it no longer exists; also 1.3 no longer allows configurable DH groups so 'dhparam configured' is ignored and useless. If you mean "AES256+EDH" as an OpenSSL cipherlist, that identifies old (<=1.2) ciphersuites that are ignored and useless in 1.3; if you mean it as a generic description, it is (1) incomplete and (2) very weird, because only OpenSSL ever used the spelling EDH (plus now all upstream-supported versions consider it obsolete). | |
| S Jul 30, 2019 at 9:53 | history | suggested | yeah_well | CC BY-SA 4.0 |
improved grammar
|
| Jul 30, 2019 at 9:04 | review | Suggested edits | |||
| S Jul 30, 2019 at 9:53 | |||||
| Jul 30, 2019 at 6:52 | answer | added | forest | timeline score: 3 | |
| Jul 30, 2019 at 6:49 | comment | added | Jayesh Sahu | I am doing some research and not done any specific threat modeling for the same. But data on the wire should be secure and threat can be considered from outside only(Assuming no internal threat). | |
| Jul 30, 2019 at 5:50 | review | Close votes | |||
| Jul 30, 2019 at 6:55 | |||||
| Jul 30, 2019 at 5:46 | comment | added | forest | You need to provide more detail than that, and a threat model. This still isn't nearly enough to answer such a broad question. I mean, neither TLS nor SSH are "insecure" if used correctly... | |
| Jul 30, 2019 at 5:44 | comment | added | Jayesh Sahu | AES256+EDH <\br> TLS1.3 only <\br> strong dhparam configured | |
| Jul 30, 2019 at 5:35 | review | First posts | |||
| Jul 30, 2019 at 9:04 | |||||
| Jul 30, 2019 at 5:32 | comment | added | forest | This depends on a lot of different things... We'd need to know the exact configuration you're using for TLS as well as for SSH, as well as your precise threat model. | |
| Jul 30, 2019 at 5:31 | history | asked | Jayesh Sahu | CC BY-SA 4.0 |