Re: [Computer-go] KGS access problem
Try disabling https everywhere extension and accessing the unsecure site at http://www.gokgs.com/ but yes, it would be better if they fixed this On 2015-09-10 5:31, "Ingo Althöfer" wrote: Hello, I have problems to access the KGS server. My Firefox 40.0.3 (under Windows 8.1) is even not allowing me to visit the website www.gokgs.com. Argument: "Diffie-Hellman key is too weak" Does someone here know which person at KGS would be the right one to inform about this problem? Thanks in advance, Ingo. ___ Computer-go mailing list Computer-go@computer-go.org http://computer-go.org/mailman/listinfo/computer-go ___ Computer-go mailing list Computer-go@computer-go.org http://computer-go.org/mailman/listinfo/computer-go
[Computer-go] KGS access problem
Hello, I have problems to access the KGS server. My Firefox 40.0.3 (under Windows 8.1) is even not allowing me to visit the website www.gokgs.com. Argument: "Diffie-Hellman key is too weak" Does someone here know which person at KGS would be the right one to inform about this problem? Thanks in advance, Ingo. ___ Computer-go mailing list Computer-go@computer-go.org http://computer-go.org/mailman/listinfo/computer-go
Re: [Computer-go] KGS access problem
This has already been reported. We don't expect it to be fixed any time soon. It only happens if you try to use https access; http access is unaffected. Two workarounds are possible. The easy one is to use an old or inferior browser, which does not care about the weakness of a 512-bit key. A more thorough workaround is to find somewhere in your browser settings that you can set it to accept 512-bit keys; and then, if you are worried, undo the change after you have finished accessing gokgs.com Nick On 10 September 2015 at 13:31, "Ingo Althöfer" <3-hirn-ver...@gmx.de> wrote: > Hello, > > I have problems to access the KGS server. My Firefox 40.0.3 > (under Windows 8.1) is even not allowing me to visit the website > www.gokgs.com. > Argument: "Diffie-Hellman key is too weak" > > Does someone here know which person at KGS would be the right > one to inform about this problem? > > Thanks in advance, Ingo. > ___ > Computer-go mailing list > Computer-go@computer-go.org > http://computer-go.org/mailman/listinfo/computer-go -- Nick Wedd mapr...@gmail.com ___ Computer-go mailing list Computer-go@computer-go.org http://computer-go.org/mailman/listinfo/computer-go
Re: [Computer-go] KGS access problem
> I have problems to access the KGS server. My Firefox 40.0.3 > (under Windows 8.1) is even not allowing me to visit the website > www.gokgs.com. > Argument: "Diffie-Hellman key is too weak" Here is how to have Firefox not be so fussy: http://letusexplain.blogspot.co.uk/2015/08/solved-server-has-weak-ephemeral-diffie.html There seems no workaround for Chrome, so chrome users will still provider the consumer pressure on server operators to install a more secure key. Here is background of what it is defending against: http://arstechnica.com/security/2015/05/https-crippling-attack-threatens-tens-of-thousands-of-web-and-mail-servers/ I.e. my understanding is that it allows a hacker to user a man-in-the-middle attack, so effectively https with a 512-bit key is as secure as http... but only if you believe someone is actively trying to eavesdrop on your browser session. In the case of IGS, it could be that the NSA is trying to sniff out people using the Chinese Opening, as a way to build up a list of potential commie activists, so lets hope the SSL certificate is fixed soon... Darren ___ Computer-go mailing list Computer-go@computer-go.org http://computer-go.org/mailman/listinfo/computer-go