Re: Where are others "SHA256 " cipher suits in Firefox 27?

2014-02-06 Thread Kurt Roeckx
On Thu, Feb 06, 2014 at 09:57:34PM +, gegard4321-bugzi...@yahoo.co.uk wrote: > Regarding the other variants of AES-GCM > -TLS_RSA_WITH_AES_128_GCM_SHA256 > There are some sites support AES-GCM that use only ciphers with RSA key > exchange. I think it would be best not to support new standards

Where are others "SHA256 " cipher suits in Firefox 27?

2014-02-06 Thread gegard4321-bugzi...@yahoo.co.uk
Regarding the other variants of AES-GCM -TLS_RSA_WITH_AES_128_GCM_SHA256 There are some sites support AES-GCM that use only ciphers with RSA key exchange. I think it would be best not to support new standards that don't provide Forward Secrecy, but on the other hand, if this cipher is enabled th

Re: Where are others "SHA256 " cipher suits in Firefox 27?

2014-02-06 Thread Rasj
On Thursday, February 6, 2014 12:50:16 PM UTC+4, Brian Smith wrote: > > Many web-sites have only TLS_RSA_WITH_AES_256_CBC_SHA256 as kind of > > strong(even without PFS) and weak RC4 and 3DES. > Please provide some examples of such sites. Some Banks. You can include it by default but turn it off

Re: Where are others "SHA256 " cipher suits in Firefox 27?

2014-02-06 Thread Brian Smith
On Wed, Feb 5, 2014 at 9:54 PM, Rasj wrote: > Where are others? For example: > TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d) See https://briansmith.org/browser-ciphersuites-01.html. Also, please look at the archives of this mailing list. There have been several DOZEN of emails about the cipher suite sel