5 ms·
It's sad that lists.gnu.org is running obsolete TLS 1.0 crypto with weak 1024-bit DH. Either upgrade to TLS 1.2 with reasonable cipher suites, or just go back
by offmycloud 8y ago
It's sad that lists.gnu.org is running obsolete TLS 1.0 crypto with weak 1024-bit DH. Either upgrade to TLS 1.2 with reasonable cipher suites, or just go back to plain HTTP.
- ltc5505 8y agoSince I'm clueless on the subject, can I ask how you determined that information and what resource I could use to become better informed?
- thedanbob 8y agoYou can find that information on the security tab of your browser's developer tools. You can also find a lot more info about any site's HTTPS configuration at ssllabs.com. Here's the report for lists.gnu.org: https://www.ssllabs.com/ssltest/analyze.html?d=lists.gnu.org https://www.ssllabs.com/ssltest/analyze.html?d=lists.gnu.org
- dueyfinster 8y agothis video might help you [1]. [1]: https://www.youtube.com/watch?v=xA_IBcoQTD4 https://www.youtube.com/watch?v=xA_IBcoQTD4
- offmycloud 8y agoA good first step is disabling SSL 3.x and TLS 1.0 in your daily browser. I would also recommend the excellent Qualys SSL Server Test: https://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/
- avarun 8y agoIs there any way to do that on Chrome macOS?