httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Eric Covener <cove...@gmail.com>
Subject Re: svn commit: r1677721 - /httpd/httpd/branches/2.2.x/docs/conf/extra/httpd-ssl.conf.in
Date Tue, 05 May 2015 17:35:05 GMT
On Tue, May 5, 2015 at 1:28 PM, William A Rowe Jr <wrowe@rowe-clan.net> wrote:
> Was hoping for md4 vs. aes128 comparisons, (and AES-NI isn't everywhere,
> but will be, soon enough).
>
> While I agree md4 is less desirable, if we were going to make a
> recommendation,
> I'd go with favoring aes128 over md4 but retain md4 as a backup, in forced
> server
> preference.  And label this a known-insecure configuration.


Do you mean RC4?  I think the conventional wisdom (of the moment) is
to remove RC4 completely.
-- 
Eric Covener
covener@gmail.com

Mime
View raw message