full-disclosure - TLS/SSL Compatibility Report 2011

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 22 Sep 2011 18:48:31 +0200
From: Thierry Zoller <Thierry@...ler.lu>
To: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: TLS/SSL Compatibility Report 2011

Hey,
I  though  it  would  be  worthwhile  to  let you know about my recent
updates to the "TLS/SSL Compatiblity Report". A Document that tries to
give a complete overview over  what  TLS/SSL protocols and  what  ciphers
are  available on different platforms and browsers.

The 2011 version was updated notably with the following items :

* Chrome moved away from SCHANNEL to NSS offering better
crypto on lower end systems (XP, 2003). Loosing however the
TLS 1.1 and TLS 1.2 capability of the latest Microsoft Operation
Systems.

Especially  with  the  release of the BEAST we might want to know what
platforms actually support TLS 1.1 (or 1.2).

The blog post and document is available here:
http://blog.g-sec.lu/2011/09/ssltls-hardening-and-compatibility.html

Should  you  be  aware  of any missing or wrong information, drop me a
mail.

Regards,
Thierry

-- 
http://blog.zoller.lu
Thierry Zoller

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/