Re: [TLS] Security today

[Mike <mike-list at pobox.com>]

> 3. The major servers support ephemeral DH, as do many clients.

This is where you are wrong.  Here is a list of servers that will
not negotiate DHE_RSA with any of AES128, AES256, or DES3:

   www.bankofamerica.com
   www.wellsfargo.com
   www.citibank.com
   www.americanexpress.com
   www.visa.com
   www.mastercard.com
   www.discovercard.com
   www.amazon.com
   www.apple.com
   www.microsoft.com
   www.ibm.com
   www.verisign.com
   www.godaddy.com
   www.equifax.com

There are only a few that I just tried that do:

   www.paypal.com
   www.entrust.com
   www.thawte.com

> You should of course feel free to write an advocacy piece somewhere
> about how people really should use DHE, but that's not really
> something appropriate for the TLS WG to take on.

Ok, I guess that is what I will have to do.  I disagree that the
TLS WG can just write a spec and then they're done.  Any company
with a complex product (and the spec is a product of sorts) writes
whitepapers, and even sends experts to customer sites to make sure
it is installed properly.  Clearly we can't do the latter, but a
whitepaper is certainly doable (and needed!).

Mike
_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls