Timeline for How to disable CBC-mode ciphers
Current License: CC BY-SA 4.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 26, 2022 at 8:41 | comment | added | A. Hersean | Today, the easiest way to disable CBC cipher suites would be to only allow TLS in version 1.3 or above. | |
| Feb 23, 2021 at 14:16 | history | edited | Synchro | CC BY-SA 4.0 | edited body |
| Oct 27, 2019 at 22:29 | answer | added | Bill Cheswick | timeline score: 16 | |
| Aug 26, 2019 at 12:15 | answer | added | ApolloDS | timeline score: 3 | |
| Apr 22, 2019 at 9:01 | history | tweeted | twitter.com/StackSecurity/status/1120251153298665473 | ||
| Apr 22, 2019 at 6:22 | answer | added | imgx64 | timeline score: 35 | |
| Oct 5, 2017 at 13:56 | answer | added | Christopher Schultz | timeline score: 1 | |
| Aug 1, 2017 at 20:02 | comment | added | Synchro | Yes, it's true, it does end up being quite a short whitelist! Don't forget ChaCha20 though... | |
| Aug 1, 2017 at 20:01 | comment | added | StackzOfZtuff | Isn't there very very little left if you exclude CBC and non forward secure and limit to AES ciphers? I think all that's left then is like four (?) GCM ciphers, right? And you could well put that as a whitelist? | |
| Aug 1, 2017 at 8:03 | vote | accept | Synchro | ||
| Aug 1, 2017 at 7:37 | answer | added | Steffen Ullrich | timeline score: 12 | |
| Aug 1, 2017 at 6:34 | history | asked | Synchro | CC BY-SA 3.0 |