Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
tptacek
on May 14, 2015
|
parent
|
context
|
favorite
| on:
Why your 'A' grade SSL is 'outdated cryptography' ...
It really
shouldn't
be possible to get an SSL Labs 'A' with anything but GCM or Poly1305.
tomjen3
on May 14, 2015
[–]
Doesn't that mean giving up old browsers though?
tptacek
on May 14, 2015
|
parent
|
next
[–]
Are you the kind of person who sees a 'B' as a failing grade?
tomjen3
on May 14, 2015
|
root
|
parent
|
next
[–]
If getting an A requires things that are, for a large portion, not feasable then I consider that a failing grade, but it is the test that fails, not me.
Anyway I asked a factual question, I would like an answer.
tptacek
on May 14, 2015
|
root
|
parent
|
next
[–]
The answer is "no".
nailer
on May 14, 2015
|
parent
|
prev
|
next
[–]
No, in this case, it just means preferring GCM. If a browser comes along that only does CBC, the server will pick CBC.
macspoofing
on May 14, 2015
|
parent
|
prev
|
next
[–]
No. It means you get a B.
floody-berry
on May 14, 2015
|
parent
|
prev
[–]
Would you want to ride in a car with failing brakes?
Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
