[jdev] manifesto 0.4

Thijs Alkemade thijs at xnyhps.nl
Wed Nov 6 20:35:22 UTC 2013


On 6 nov. 2013, at 21:23, Philipp Hancke <fippo at goodadvice.pages.de> wrote:

> Am 06.11.2013 21:02, schrieb Alexander Holler:
>> Not exactly the same, but I don't like the part
>> 
>> "or require cipher suites that enable forward secrecy"
>> 
>> for the same reason. OpenSSL 1.x isn't around that long, and there are
>> still many systems which do use e.g. Debian squeeze. And I assume the
>> state of OpenSSL on other "stable" systems like e.g. SLES or RHEL isn't
>> much better (but that's just an assumption from me).
> 
> DHE/EDH suites have been around at least since 2006 (openssl 0.9.8d is the oldest binary i have access to).

http://www.openssl.org/news/changelog.html suggests since as early as 1999.

Thijs

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://www.jabber.org/jdev/attachments/20131106/bda9ad67/attachment.pgp>


More information about the JDev mailing list