Timeline for Remove RC4 from SSL/TLS ciphers in Chromium
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 4, 2013 at 10:41 | comment | added | king_julien | @AlexLauerman Oh, I see now - I shouldn't read so fast the next time :/ Thanks for the clarification | |
| Nov 4, 2013 at 3:28 | comment | added | Alex Lauerman | @king_julien My list of ciphers was to disable CBC, not RC4, sorry for not being more clear on that since it goes against this thread. It was posted as a reference since I haven't disabled RC4, but I was pointing out that I don't think user27136's list will work in all scenarios if the are using RC4 ciphers from >TLS1.0, and I wanted to provide more info, but then again you dont have to disable all ciphers, just all the ones that are preferred over what you want it to not use. I only disabled CBC for testing by the way. | |
| Oct 21, 2013 at 15:53 | comment | added | king_julien | @AlexLauerman Your option string does not work for me. I think that I understand what you did and also think that this should be correct, but for me to disable the RC4 cipher on google.com I need to use chromium-browser --cipher-suite-blacklist=0x0004,0x0005,0xc011 instead. Notice the c in 0xc011. Your option string does not disable RC4 on google.com for me. I found the working solution @ superuser.com/questions/616996/…, but do not yet understand the last entry and wait for a reply to my comment. | |
| Sep 11, 2013 at 14:41 | comment | added | Alex Lauerman | You also need to disable the ciphers from RFC4346 if you're using TLS 1.1. Here is the list of ciphers I'm using to disable CBC: --cipher-suite-blacklist=0x000B,0x000C,0x000D,0x0011,0x0012,0x0013,0x002F,0x0030,0x0031,0x0032,0x0033,0x0034,0x0035,0x0036,0x0037,0x0038,0x0039,0x003A | |
| Jul 11, 2013 at 9:34 | vote | accept | qbi | ||
| S Jul 11, 2013 at 8:30 | history | suggested | Andrew Lott | CC BY-SA 3.0 | improved formatting |
| Jul 11, 2013 at 8:13 | review | Suggested edits | |||
| S Jul 11, 2013 at 8:30 | |||||
| Jul 10, 2013 at 23:31 | review | First posts | |||
| Jul 10, 2013 at 23:42 | |||||
| Jul 10, 2013 at 23:16 | history | answered | Rafael Koike | CC BY-SA 3.0 |