On 20/04/14 10:32, Steve Holdoway wrote:
To be honest, I reckon that you're being pretty paranoid ( even if it
is in the SysAdmin jobspec ) by tuning SSL at all, although I do make
all these newfangled elliptical ciphers available, and try to use the
less computationally complex options. Can't remember what not using
RC4 disables, but that also seems to be a logical step as it's been
pretty well discredited. SSL2 is in the same boat.
Sorry Chris, poorly worded. What I meant to say was that in general I
think that it's probably a bit over the top to worry about tuning SSL,
rather than intimating that you're paranoid!
_______________________________________________
Linux-users mailing list
[email protected]
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users