Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

[Dale <rdalek1967@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 1618 bytes --]

Matti Nykyri wrote:
> On Apr 19, 2014, at 18:29, Dale <rdalek1967@gmail.com
> <mailto:rdalek1967@gmail.com>> wrote:
>
>> Mick wrote:
>> > Encryption still works, at least for some attackers. The fact that burglars can pick locks
>> doesn't mean that you should leave your door unlocked. FWIW I just
>> checked my bank's website encryption ... they *still* use RC4!!! O_O
>> I guess they are keen to make sure all these customers with WinXP and
>> MSIE 7.0 can still login? For crying out loud! It seems that RSA's
>> days may be numbered and elliptic curve cryptography would be the way
>> forward, not because of resource constrained mobile devices, but also
>> because of recent advances in crypto-analytics which may make RSA
>> obsolete:
>> http://www.technologyreview.com/news/517781/math-advances-raise-the-prospect-of-an-internet-security-crisis/
>>
>>
>> How does one find out what their bank uses?  I'd like to check on
>> what mine uses.  I have Seamonkey and Firefox installed here IF it
>> matters.
>
> Well you can use ssllabs.com <http://ssllabs.com>. I use it for
> debuging. Here is what Bank of America uses:
>
> https://www.ssllabs.com/ssltest/analyze.html?d=www.bankofamerica.com&hideResults=on
>
>
> -Matti

I get this.

https://www.ssllabs.com/ssltest/analyze.html?d=cadencebank.com&hideResults=on 


I don't know a lot about this encryption stuff but mine don't look to
good.  :/  You got your test graded and mine seems to be bad enough to
not even deserve a grading. 

Dale

:-)  :-) 

-- 
I am only responsible for what I said ... Not for what you understood or how you interpreted my words!


[-- Attachment #2: Type: text/html, Size: 3430 bytes --]