Tag Archives: sslv2

DHS 要求郵件系統都必須使用 STARTTLS、DMARC,並且全面禁用 RC4 與 3DES

在 Twitter 上看到 18F 貼了 DHS 的新規定:「Enhance Email and Web Security」。 Just launched by our friends at DHS! A new federal directive to require DMARC and STARTTLS, and to cut RC4 and 3DES: https://t.co/gp5G7A6LMA pic.twitter.com/6V4UJ9sGIo — 18F (@18F) October 16, … Continue reading

Posted in Computer, Mail, Murmuring, Network, Privacy, Security, Service, WWW | Tagged , , , , , , , , , , , , , , , , , , , , | Leave a comment

最新的 SSL connection 攻擊:DROWN attack

前幾天 OpenSSL 宣佈將在三月一日更新版本,包括了幾項層級被標示為 High 的問題:「[openssl-announce] Forthcoming OpenSSL releases」。 今天看到這個問題了,被稱為「The DROWN Attack」,全名為 Decrypting RSA with Obsolete and Weakened eNcryption,整個 internet 上大約 33% 的伺服器受到影響: Our measurements indicate 33% of all HTTPS servers are vulnerable to the attack. 包括兩類,第一類是支援 SSLv2 的伺服器,約 17%: It … Continue reading

Posted in Computer, Murmuring, Network, Security, WWW | Tagged , , , , , , | 2 Comments