[aklug] Re: ACS Google Gateway

On Sat, Oct 12, 2013 at 10:02 AM, Tom Simes <simestd@netexpress.com> wrote:

[snip]

> The take away is if privacy is important, you need to be using perfect
> forward secrecy and the best current implementation is via
> Diffie-Hellman. OpenSSL can implement this now, but it's not default.

What Tom said. Here's a great way to check the health and de-facto
negotiated browser cipher sets for your web OpenSSL setup:

    https://www.ssllabs.com/ssltest/

Be sure to check the "Do not show the results on the boards" checkbox
if you don't want your test to show up in the lists.

Royce
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Sat Oct 12 13:04:36 2013