Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-27 Thread Brian Smith
On Mon, Jan 27, 2014 at 10:49 AM, wrote: > On Monday, January 27, 2014 10:52:44 AM UTC-7, Brian Smith wrote: >> On Mon, Jan 27, 2014 at 9:26 AM, wrote: > > I can't speak for FF - and I've certainly read enough standards to say > that there are too many standards. I do think that the IETF does

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-27 Thread Alan Braggins
On 27/01/14 17:26, ripber...@aol.com wrote: 2) NIST is a US government standards board that drives a lot of compliance regulation. There are companies what will want to be able show that they are NIST compliant. The standard at this point does NOT allow you to use Camellia. S

Sites which fail with tls > 1.0

2014-01-27 Thread cloos
In case anyone is keeping a list, while helping a relative I determined that timewarnercable.com's login server (wayfarer.timewarnercable.com) will not work with tls 1.1 or 1.2. The connection fails after the client right after the client hello. I had to set security.tls.version.max to 1 to get f

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-27 Thread ripberger
On Monday, January 27, 2014 10:52:44 AM UTC-7, Brian Smith wrote: > On Mon, Jan 27, 2014 at 9:26 AM, wrote: > > > On Monday, January 27, 2014 6:19:42 AM UTC-7, Kurt Roeckx wrote: > > > 2) NIST is a US government standards board that drives a lot of compliance > > > regulation. There are

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-27 Thread Kurt Roeckx
On Mon, Jan 27, 2014 at 09:26:20AM -0800, ripber...@aol.com wrote: > > 2) NIST is a US government standards board that drives a lot of compliance > regulation. There are companies what will want to be able show that they > are NIST compliant. I'm sure it is important to some. But I t

Chrome: From NSS to OpenSSL

2014-01-27 Thread Kathleen Wilson
Draft Design Doc posted by Ryan Sleevi regarding Chrome migrating from NSS to OpenSSL: https://docs.google.com/document/d/1ML11ZyyMpnAr6clIAwWrXD53pQgNR-DppMYwt9XvE6s/edit?pli=1 "Switching to OpenSSL, however, has the opportunity to bring significant performance and stability advantages to iOS,

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-27 Thread Brian Smith
On Mon, Jan 27, 2014 at 9:26 AM, wrote: > On Monday, January 27, 2014 6:19:42 AM UTC-7, Kurt Roeckx wrote: > 2) NIST is a US government standards board that drives a lot of compliance > regulation. There are companies what will want to be able show that they > are NIST compliant. The

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-27 Thread ripberger
On Monday, January 27, 2014 6:19:42 AM UTC-7, Kurt Roeckx wrote: > I really recommend that you do read all the messages. All of this has > > been discussed in various thread both here and on other lists. > > Ok - I will try (but it will be after this post). > > Other recommendations don't not

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-27 Thread Kurt Roeckx
On 2014-01-27 02:43, ripber...@aol.com wrote: Hi, So I didn't get to the bottom of this thread because some of it is 'loading' I really recommend that you do read all the messages. All of this has been discussed in various thread both here and on other lists. Encryption: AES-256