> On 20 jan. 2015, at 12:16, Skhaen <[email protected]> wrote: > > Hi everyone, > > RC4 is broken since a loooooong time ago, can we have a critical warning > for it on xmpp.net please? > > https://en.wikipedia.org/wiki/RC4#Security > > 19 mars 2013 - RC4 in TLS is Broken: Now What? > https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what > > 12 novembre 2013 - Microsoft - Security Advisory 2868725: Recommendation > to disable RC4 > http://blogs.technet.com/b/srd/archive/2013/11/12/security-advisory-2868725-recommendation-to-disable-rc4.aspx > > Thx! > > Skhaen >
Hi Skhaen, Enabling RC with TLS 1.1+ currently caps you at A-. I see ssllabs have changed their test on December 8 last year to cap this on B instead. I’ll update the xmpp.net test next time I get around to it. Regards, Thijs Alkemade
signature.asc
Description: Message signed with OpenPGP using GPGMail
