Super User is a question and answer site for computer enthusiasts and power users. It only takes a minute to sign up.
Sign up to join this community
In Firefox, it is clear how to edit the cipher suites list simply from about:config. From digging in the web, I know that it is quite complicated in Chrome and IE. Some references show how to black list some ciphers in Chrome but I am looking for how to find the list of the supported cipher suites by Chrome? then, how to disable and enable some? Similarly, I need to know the same for IE?
Can you please help me with more step by step explanation?
It is easy to know the list of cipher suite that any browser (client) send by using sniffing tool such as wireshark. I opened an ssl page, then from edit -> find searched for the string client hello then inside this packet, I could find the list of cipher suites which is the exact list the client sent.
This is now rather an old question, but...
For MSIE, this is configured via Computer Configuration -> Administrative Templates -> Network -> SSL Configuration Settings. Note that the policy is "disabled" by default, meaning that the system is choosing the ciphersuite depending on some hard-wired configuration. When you enable the policy, the preference list is populated with all the available cipher suites in alphabetic order!
I am still struggling to find out how to do this for Chrome, but if you point your browser at https://cc.dcsec.uni-hannover.de/ you will see what it thinks the preference is. Note that the names it reports are like the OpenSSL names (rather than the IANA names used by MSIE) but not an exact match - they omit the curve algos for EC.
