Tag Info

Hot answers tagged

38

FYI, this Superfish software is now a major news headline. It is preloaded by Lenovo (there may be other vendors). You have to uninstall it, but that will not remove the certificate(s). To remove the certificate(s), you must do the following: Run mmc.exe Go to File -> Add/Remove Snap-in Pick Certificates, click Add Pick Computer Account, click Next Pick ...


2

I'm referring to the POODLE vulnerability discovered recently that TLS 1.0 is no longer secure Poodle does not make TLS 1.0 not secure, what it does is make the TLS 1.0 connection fail and the browser falls back to the older less secure SSL 3.0 which does have vulnerabilities that can be exploited. RDP will not fallback to SSL 3.0, it falls back to ...


1

The following configuration is (or used to be) the best configuration according to SSLLabs: SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1 SSLCompression off SSLHonorCipherOrder on SSLCipherSuite ...


1

SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-SSLv3:-EXP:!kEDH ^^^^^^^^ Disabling SSLv3 cipher suites disables all cipher suites introduced with SSL3.0. Since these ciphers suites are also used with later SSL versions (TLS1.0+) and new cipher suites were mostly introduced with TLS1.2 ...


1

Had the same problem, this is how I solved the problem. Add the email account without SSL, make sure to select normal password, and select NO SECURITY. Then go to account settings, and change it to the SSL settings. The security certificate will then show up, and that will allow you to connect.


1

According to the report from ssllabs you are missing chain certificates. This way browsers which do not have the missing intermediates certificates cached and which don't download them can not verify the certificate chain. Apart from that you better make lots of improvements for this site: SSLv3 is still enabled (broken) RC4-MD5 as preferred cipher (weak) ...



Only top voted, non community-wiki answers of a minimum length are eligible