Re: [Computer-go] KGS access problem

2015-09-10 Thread Igor Polyakov
Try disabling https everywhere extension and accessing the unsecure site 
at http://www.gokgs.com/


but yes, it would be better if they fixed this

On 2015-09-10 5:31, "Ingo Althöfer" wrote:

Hello,

I have problems to access the KGS server. My Firefox 40.0.3
(under Windows 8.1) is even not allowing me to visit the website
www.gokgs.com.
Argument: "Diffie-Hellman key is too weak"

Does someone here know which person at KGS would be the right
one to inform about this problem?

Thanks in advance, Ingo.
___
Computer-go mailing list
Computer-go@computer-go.org
http://computer-go.org/mailman/listinfo/computer-go


___
Computer-go mailing list
Computer-go@computer-go.org
http://computer-go.org/mailman/listinfo/computer-go

[Computer-go] KGS access problem

2015-09-10 Thread Ingo Althöfer
Hello,

I have problems to access the KGS server. My Firefox 40.0.3
(under Windows 8.1) is even not allowing me to visit the website
www.gokgs.com.
Argument: "Diffie-Hellman key is too weak"

Does someone here know which person at KGS would be the right
one to inform about this problem?

Thanks in advance, Ingo.
___
Computer-go mailing list
Computer-go@computer-go.org
http://computer-go.org/mailman/listinfo/computer-go

Re: [Computer-go] KGS access problem

2015-09-10 Thread Nick Wedd
This has already been reported.  We don't expect it to be fixed any time
soon.

It only happens if you try to use https access; http access is unaffected.

Two workarounds are possible.  The easy one is to use an old or inferior
browser,
which does not care about the weakness of a 512-bit key.  A more thorough
workaround is to find somewhere in your browser settings that you can set
it to
accept 512-bit keys; and then, if you are worried, undo the change after
you have
finished accessing gokgs.com

Nick

On 10 September 2015 at 13:31, "Ingo Althöfer" <3-hirn-ver...@gmx.de> wrote:

> Hello,
>
> I have problems to access the KGS server. My Firefox 40.0.3
> (under Windows 8.1) is even not allowing me to visit the website
> www.gokgs.com.
> Argument: "Diffie-Hellman key is too weak"
>
> Does someone here know which person at KGS would be the right
> one to inform about this problem?
>
> Thanks in advance, Ingo.
> ___
> Computer-go mailing list
> Computer-go@computer-go.org
> http://computer-go.org/mailman/listinfo/computer-go




-- 
Nick Wedd  mapr...@gmail.com
___
Computer-go mailing list
Computer-go@computer-go.org
http://computer-go.org/mailman/listinfo/computer-go

Re: [Computer-go] KGS access problem

2015-09-10 Thread Darren Cook
> I have problems to access the KGS server. My Firefox 40.0.3
> (under Windows 8.1) is even not allowing me to visit the website
> www.gokgs.com.
> Argument: "Diffie-Hellman key is too weak"

Here is how to have Firefox not be so fussy:


http://letusexplain.blogspot.co.uk/2015/08/solved-server-has-weak-ephemeral-diffie.html

There seems no workaround for Chrome, so chrome users will still
provider the consumer pressure on server operators to install a more
secure key.

Here is background of what it is defending against:

http://arstechnica.com/security/2015/05/https-crippling-attack-threatens-tens-of-thousands-of-web-and-mail-servers/

I.e. my understanding is that it allows a hacker to user a
man-in-the-middle attack, so effectively https with a 512-bit key is as
secure as http... but only if you believe someone is actively trying to
eavesdrop on your browser session. In the case of IGS, it could be that
the NSA is trying to sniff out people using the Chinese Opening, as a
way to build up a list of potential commie activists, so lets hope the
SSL certificate is fixed soon...

Darren

___
Computer-go mailing list
Computer-go@computer-go.org
http://computer-go.org/mailman/listinfo/computer-go