Groups > comp.lang.java.programmer > #34155

Re: One for the encryption experts

From	Duncan Idaho <duncan@dunenoemail.com>
Newsgroups	comp.lang.java.programmer
Subject	Re: One for the encryption experts
Date	2016-04-16 17:42 +0100
Organization	A noiseless patient Spider
Message-ID	<netprk$41n$1@dont-email.me> (permalink)
References	<ner0r1$7j1$1@dont-email.me> <dneg5uFl25pU1@mid.individual.net> <atqQy.6483$3C3.2611@fx03.iad> <netk2i$9k0$1@dont-email.me> <dnf344FppnqU1@mid.individual.net>

Show all headers | View raw

On 16/04/16 16:13, Robert Klemme wrote:
> On 16.04.2016 17:03, Duncan Idaho wrote:
>
>> Something Robert said jogged the old gray matter (old being the
>> operative word)
>
> :-))
>
>> Serves me right for trying to take shortcuts.
>
> Well, that is often what happens: you save time now and pay later. :-)
>
>> ssl labs still only gives me a B, something about weak diffie-helman key
>> exchanges but hopefully I can sleep nights again.
>
> You could completely disable DH or try to set a min key length of 2k or
> more.  IIRC only disabling is possible in Java.

This does it

https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/659/17/how-to----disable-weak-ciphers-in-tomcat-7--8

An 'A' from ssllabs.com

I'm off for several beers, there's one in the tap for you guys.

Happy days

Duncan

-- 
Duncan Idaho

Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

One for the encryption experts Duncan Idaho <duncan@dunenoemail.com> - 2016-04-15 16:23 +0100
  Re: One for the encryption experts Robert Klemme <shortcutter@googlemail.com> - 2016-04-16 11:49 +0200
    Re: One for the encryption experts Nemo <nemo@invalid.invalid> - 2016-04-16 08:44 -0400
      Re: One for the encryption experts Duncan Idaho <duncan@dunenoemail.com> - 2016-04-16 16:03 +0100
        Re: One for the encryption experts Robert Klemme <shortcutter@googlemail.com> - 2016-04-16 17:13 +0200
          Re: One for the encryption experts Duncan Idaho <duncan@dunenoemail.com> - 2016-04-16 17:42 +0100

csiph-web