Re: Use of SSL as a VPN
From: Nelson B (NOnelsonSPAM@NObolyard.comSPAM)
Date: 02/24/03
- Next message: Peter Fairbrother: "Re: Initializing GFSR Generators."
- Previous message: Michael Amling: "Re: :::Low level question about AES implementation:::"
- Maybe in reply to: Nelson B: "Re: Use of SSL as a VPN"
- Next in thread: Paul Rubin: "Re: Use of SSL as a VPN"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Nelson B <NOnelsonSPAM@NObolyard.comSPAM> Date: Mon, 24 Feb 2003 02:44:08 GMT
dave anonymous wrote:
> "David Wagner" <daw@mozart.cs.berkeley.edu> wrote in message
> news:b2rh2d$cr6$1@agate.berkeley.edu...
>>Unfortunately, I'm not sure that the DHE ciphersuites are as widely
>>supported in clients and servers as RSA.
>
> I wondered about that and tried to find which servers/browsers support
> DHE. Apache does. The documentation on MS's web site is so poor
> I can't tell. The online docs for the browsers were hopeless too, so who
> knows.
I'm using a pre-release nightly build of mozilla 1.3. It supports 8
different DHE ciphersuites, including:
_DHE_RSA_WITH_AES_256_CBC_SHA,
_DHE_DSS_WITH_AES_256_CBC_SHA,
_DHE_RSA_WITH_AES_128_CBC_SHA,
_DHE_DSS_WITH_AES_128_CBC_SHA,
_DHE_DSS_WITH_RC4_128_SHA,
_DHE_RSA_WITH_3DES_EDE_CBC_SHA,
_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
_DHE_RSA_WITH_DES_CBC_SHA,
_DHE_DSS_WITH_DES_CBC_SHA,
It interoperates with numerous OpenSSL servers that support those
ciphersuites.
> Interestingly
> Amazon.com supports a DHE mode, so somebody out there must use it.
Yes, Amazon's mail login server supports DHE_RSA_with_3DES_EDE_CBC_SHA
ciphersuite (among others), but their image servers don't (or didn't
when I tried), so if you set your browser to support only DHE ciphersuites,
you don't see any images. I guess forward secrecy might be less important
for images.
-- Nelson B
- Next message: Peter Fairbrother: "Re: Initializing GFSR Generators."
- Previous message: Michael Amling: "Re: :::Low level question about AES implementation:::"
- Maybe in reply to: Nelson B: "Re: Use of SSL as a VPN"
- Next in thread: Paul Rubin: "Re: Use of SSL as a VPN"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
