Re: Where are others SHA256 cipher suits in Firefox 27?

2014-02-06 Thread Brian Smith
On Wed, Feb 5, 2014 at 9:54 PM, Rasj rasj...@gmail.com wrote: Where are others? For example: TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d) See https://briansmith.org/browser-ciphersuites-01.html. Also, please look at the archives of this mailing list. There have been several DOZEN of emails about the

Re: Where are others SHA256 cipher suits in Firefox 27?

2014-02-06 Thread Rasj
On Thursday, February 6, 2014 12:50:16 PM UTC+4, Brian Smith wrote: Many web-sites have only TLS_RSA_WITH_AES_256_CBC_SHA256 as kind of strong(even without PFS) and weak RC4 and 3DES. Please provide some examples of such sites. Some Banks. You can include it by default but turn it off if

Where are others SHA256 cipher suits in Firefox 27?

2014-02-06 Thread gegard4321-bugzi...@yahoo.co.uk
Regarding the other variants of AES-GCM -TLS_RSA_WITH_AES_128_GCM_SHA256 There are some sites support AES-GCM that use only ciphers with RSA key exchange. I think it would be best not to support new standards that don't provide Forward Secrecy, but on the other hand, if this cipher is enabled

Re: Where are others SHA256 cipher suits in Firefox 27?

2014-02-06 Thread Kurt Roeckx
On Thu, Feb 06, 2014 at 09:57:34PM +, gegard4321-bugzi...@yahoo.co.uk wrote: Regarding the other variants of AES-GCM -TLS_RSA_WITH_AES_128_GCM_SHA256 There are some sites support AES-GCM that use only ciphers with RSA key exchange. I think it would be best not to support new standards