Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-28 Thread ripberger
On Monday, January 27, 2014 4:35:34 PM UTC-7, Brian Smith wrote: > On Mon, Jan 27, 2014 at 10:49 AM, wrote: > > > On Monday, January 27, 2014 10:52:44 AM UTC-7, Brian Smith wrote: > > >> On Mon, Jan 27, 2014 at 9:26 AM, wrote: Thanks much Brian and Alan for the links - and the 800-52 referen

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-27 Thread ripberger
On Monday, January 27, 2014 10:52:44 AM UTC-7, Brian Smith wrote: > On Mon, Jan 27, 2014 at 9:26 AM, wrote: > > > On Monday, January 27, 2014 6:19:42 AM UTC-7, Kurt Roeckx wrote: > > > 2) NIST is a US government standards board that drives a lot of compliance > > > regulation. There are

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-27 Thread ripberger
On Monday, January 27, 2014 6:19:42 AM UTC-7, Kurt Roeckx wrote: > I really recommend that you do read all the messages. All of this has > > been discussed in various thread both here and on other lists. > > Ok - I will try (but it will be after this post). > > Other recommendations don't not

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-26 Thread ripberger
Hi, So I didn't get to the bottom of this thread because some of it is 'loading' but I didn't see any mention of NIST 800-131a in all the posts I saw. This standard (along with NIST 800-57 Part 1) provides information about security strength and what is required. Basically NIST is saying you sho

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-26 Thread ripberger
On Sunday, January 26, 2014 6:25:58 PM UTC-7, ripb...@aol.com wrote: > Hi, > > So I didn't get to the bottom of this thread because some of it is 'loading' > but I didn't see any mention of NIST 800-131a in all the posts I saw. > > > > This standard (along with NIST 800-57 Part 1) provides inf

Re: Proposal to Remove legacy TLS Ciphersuits Offered by Firefox

2014-01-26 Thread ripberger
Hi, So I didn't get to the bottom of this thread because some of it is 'loading' but I didn't see any mention of NIST 800-131a in all the posts I saw. This standard (along with NIST 800-57 Part 1) provides information about security strength and what is required. Basically NIST is saying you sho