On 2012-03-26, Nick Mathewson wrote:
> On Mon, Mar 26, 2012 at 3:17 AM, Robert Ransom
> wrote:
> [...]
>>>(OpenSSL before 1.0.0 did not support ECDHE ciphersuites; OpenSSL
>>>before 1.0.0e or so had some security issues with them.)
>>
>> Can Tor detect that it is running with a version o
On Mon, Mar 26, 2012 at 3:17 AM, Robert Ransom wrote:
[...]
>> (OpenSSL before 1.0.0 did not support ECDHE ciphersuites; OpenSSL
>> before 1.0.0e or so had some security issues with them.)
>
> Can Tor detect that it is running with a version of OpenSSL with those
> security issues and refus
On 2012-03-20, Nick Mathewson wrote:
> Filename: 198-restore-clienthello-semantics.txt
> Title: Restore semantics of TLS ClientHello
> Author: Nick Mathewson
> Created: 19-Mar-2012
> Status: Open
>
> Overview:
>
>Currently, all supported Tor versions try to imitate an older version
>of Fir
On 03/20/2012 09:08 PM, Nick Mathewson wrote:
> On Tue, Mar 20, 2012 at 11:57 PM, Jacob Appelbaum wrote:
> [...]
>> Ah ha. That sounds like a nightmare. Is there a bug report we can pile
>> on to request that they don't create a headache for everyone in the future?
>
> There is, but I don't curre
On Tue, Mar 20, 2012 at 11:57 PM, Jacob Appelbaum wrote:
[...]
> Ah ha. That sounds like a nightmare. Is there a bug report we can pile
> on to request that they don't create a headache for everyone in the future?
There is, but I don't currently see much point: their developers are
irritated, and
Jacob sent me this message in reply to my last; sending to tor-dev
with permission.
On Tue, Mar 20, 2012 at 11:57 PM, Jacob Appelbaum wrote:
> On 03/20/2012 08:14 PM, Nick Mathewson wrote:
>> On Tue, Mar 20, 2012 at 9:30 PM, Jacob Appelbaum wrote:
>>> On 03/20/2012 08:33 AM, Nick Mathewson wrote
Forgot to send this to tor-dev: ouch. Sending now.
On Tue, Mar 20, 2012 at 9:30 PM, Jacob Appelbaum wrote:
> On 03/20/2012 08:33 AM, Nick Mathewson wrote:
>> Filename: 198-restore-clienthello-semantics.txt
>> Title: Restore semantics of TLS ClientHello
>> Author: Nick Mathewson
>> Created: 19-Ma
On 2012-03-21, Tom Ritter wrote:
> On 20 March 2012 11:33, Nick Mathewson wrote:
>> Filename: 198-restore-clienthello-semantics.txt
>> Title: Restore semantics of TLS ClientHello
>> Author: Nick Mathewson
>> Created: 19-Mar-2012
>> Status: Open
>
> I've not worked with TLS renegotiations before,
On Tue, Mar 20, 2012 at 10:48 PM, Tom Ritter wrote:
> On 20 March 2012 11:33, Nick Mathewson wrote:
>> Filename: 198-restore-clienthello-semantics.txt
>> Title: Restore semantics of TLS ClientHello
>> Author: Nick Mathewson
>> Created: 19-Mar-2012
>> Status: Open
>
> I've not worked with TLS rene
On 20 March 2012 11:33, Nick Mathewson wrote:
> Filename: 198-restore-clienthello-semantics.txt
> Title: Restore semantics of TLS ClientHello
> Author: Nick Mathewson
> Created: 19-Mar-2012
> Status: Open
I've not worked with TLS renegotiations before, but could Tor perform
a renegotiation after
On 03/20/2012 08:33 AM, Nick Mathewson wrote:
> Filename: 198-restore-clienthello-semantics.txt
> Title: Restore semantics of TLS ClientHello
> Author: Nick Mathewson
> Created: 19-Mar-2012
> Status: Open
>
[ ... ]
> Currently, OpenSSL 1.0.0 (in its default configuration) supports every
> c
Filename: 198-restore-clienthello-semantics.txt
Title: Restore semantics of TLS ClientHello
Author: Nick Mathewson
Created: 19-Mar-2012
Status: Open
Overview:
Currently, all supported Tor versions try to imitate an older version
of Firefox when advertising ciphers in their TLS ClientHello.
12 matches
Mail list logo