3
edits
| Line 32: | Line 32: | ||
=Weak Cipher Sites= | =Weak Cipher Sites= | ||
Not SSL v2 but low security ciphers (other places to discuss these?): | Not SSL v2 but low security ciphers (other places to discuss these?): | ||
* [https://accountmanagement.o2.co.uk https://accountmanagement.o2.co.uk] - uses DES-CBC 56bit encryption | |||
* <strike>[https://www.comcastsupport.com/sdcxuser/lachat/user/userchatstart.asp http://www.comcastsupport.com/sdcxuser/lachat/user/userchatstart.asp] | * <strike>[https://www.comcastsupport.com/sdcxuser/lachat/user/userchatstart.asp http://www.comcastsupport.com/sdcxuser/lachat/user/userchatstart.asp] | ||
** I have disabled SSL v2, all SSL v2 ciphers, everything with less than 128 bits, MD5 and this is the only site in over a year that I have seen that does not work. | ** I have disabled SSL v2, all SSL v2 ciphers, everything with less than 128 bits, MD5 and this is the only site in over a year that I have seen that does not work. | ||
edits