Re: [TLS] Issue 56: AES as MTI

[Mike <mike-list at pobox.com>]

> As far as I can tell, the real-world MTI for SSL/TLS as deployed is 
> RC4.

Yes, I've noticed this in my testing.  Many servers will pick RC4_MD5
even though it is last in my cipher list.  Examples are apple.com,
ibm.com, amazon.com, verisign.com.  When confronted with only AES
ciphers, most will negotiate it, but, for example, Verisign won't
(they do support 3DES though).

Mike

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls