Path: csiph.com!feeder.erje.net!2.eu.feeder.erje.net!newsreader4.netcologne.de!news.netcologne.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Robert Klemme Newsgroups: comp.lang.java.programmer Subject: Re: One for the encryption experts Date: Sat, 16 Apr 2016 17:13:07 +0200 Lines: 31 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Trace: individual.net 7t35H3ZsgXM3dkHuUICUxgoMTyqPnS5CEODo5F6ULoTj1CGk4= Cancel-Lock: sha1:37/KjqdE3LvZD3l6wOVXl300ezY= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 In-Reply-To: Xref: csiph.com comp.lang.java.programmer:34154 On 16.04.2016 17:03, Duncan Idaho wrote: > Something Robert said jogged the old gray matter (old being the > operative word) :-)) > Serves me right for trying to take shortcuts. Well, that is often what happens: you save time now and pay later. :-) > ssl labs still only gives me a B, something about weak diffie-helman key > exchanges but hopefully I can sleep nights again. You could completely disable DH or try to set a min key length of 2k or more. IIRC only disabling is possible in Java. > Y'know what, I've been trying to track this down for a while now and > once again only c.l.j.p really helped. > > Thanks for that, my sanity is safe (for a while anyway) You're welcome! Kind regards robert -- remember.guy do |as, often| as.you_can - without end http://blog.rubybestpractices.com/