Re: [PATCH] Re: Logjam mitigation for Wheezy?

2015-06-08 Thread micah
Kurt Roeckx k...@roeckx.be writes: On Mon, Jun 08, 2015 at 10:00:00AM +, Thorsten Glaser wrote: Stefan Fritsch sf at sfritsch.de writes: And custom DH groups are not that easy to handle in an automated way. Right. I'm currently suggesting each site to generate one and roll that out

Re: [PATCH] Re: Logjam mitigation for Wheezy?

2015-06-08 Thread Kurt Roeckx
On Mon, Jun 08, 2015 at 10:00:00AM +, Thorsten Glaser wrote: Stefan Fritsch sf at sfritsch.de writes: And custom DH groups are not that easy to handle in an automated way. Right. I'm currently suggesting each site to generate one and roll that out for the whole site (e.g. company,

Re: [PATCH] Re: Logjam mitigation for Wheezy?

2015-06-08 Thread Thorsten Glaser
Stefan Fritsch sf at sfritsch.de writes: And custom DH groups are not that easy to handle in an automated way. Right. I’m currently suggesting each “site” to generate one and roll that out for the whole “site” (e.g. company, project). For example on a cubietruck (Cortex A7), generation of a