SEMI-OT: Prohibiting RC4 Cipher Suites

Patrick Ben Koetter p at sys4.de
Fri Feb 20 19:26:00 CET 2015


A little off topic for DANE users, but somehow in scope. You might consider
disabling RC4 in your servers cipher suite. IETF released an RFC requiring

   (...) that Transport Layer Security (TLS) clients and servers never
   negotiate the use of RC4 cipher suites when they establish connections.
   This applies to all TLS versions.  This document updates RFCs 5246, 4346,
   and 2246.
   -- Prohibiting RC4 Cipher Suites, https://tools.ietf.org/rfc/rfc7465.txt

p at rick

-- 
[*] sys4 AG
 
https://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München
 
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein
 


More information about the dane-users mailing list