On Saturday 19 Apr 2014 16:29:34 Dale wrote: > How does one find out what their bank uses? I'd like to check on what > mine uses. I have Seamonkey and Firefox installed here IF it matters.
Some banks have reverted to RC4 to protect against TLS v1.0 attacks from the
BEAST.
I don't think that FF shows the algos used for key exchange and encryption in
enough detail. You can see them if you use Chromium and click on the green
padlock.
I use openssl s_client, e.g.:
openssl s_client -connect www.wellsfargo.com:443
and look for this info:
New, TLSv1/SSLv3, Cipher is RC4-SHA
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : RC4-SHA
--
Regards,
Mick
signature.asc
Description: This is a digitally signed message part.
