[aklug] Re: Chrome 45 now blocking weak DH keys / Logjam

From: Mike <alaskabarsalou@gmail.com>
Date: Fri Sep 04 2015 - 08:57:56 AKDT

Thanks for taking the time to do that Royce.

Mike B.
Quoting Royce Williams <royce@tycho.org>:

> Chrome 45, released today, now blocks weak DH keys under 1024 bits.
>
> Based on tests from the week of August 10th, the following 77 Alaskan
> sites will now produce an error in Chrome and will not be reachable.
>
> This is the error:
>
> Server has a weak ephemeral Diffie-Hellman public key
>
> ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY
>
> This error can occur when connecting to a secure (HTTPS) server. It
> means that the server is trying to set up a secure connection but, due
> to a disastrous misconfiguration, the connection wouldn't be secure at
> all!
>
> In this case the server needs to be fixed. Google Chrome won't use
> insecure connections in order to protect your privacy.
>
> [end of error]
>
>
> Background and mitigation info can be found at https://weakdh.org/ .
>
> The sites are as follows (in alphabetical order)
>
> akalpinelodge.com
> akdesktops.bannerhealth.com
> alaskanmalamute.org
> alaskausareports.ultiprotime.com
> alaskavaporsalliance.com
> alaskavaporsalliance.info
> alaskavaporsalliance.net
> alaskavaporsalliance.org
> backmaps.511ride.alaska.gov
> backup.511ride.alaska.gov
> bhview.bannerhealth.com
> bugs.asi-hsv.com
> calendars.k12northstar.org
> cityofbarrow.org
> cityofsitka.com
> climate.iarc.uaf.edu
> connect.nrim.com
> denalitek.com
> drgeorgestransky.com
> eingang.uui-alaska.com
> g2const.com
> geekinsideproductions.com
> geeks907.com
> hp092366.gi.alaska.edu
> inupiatgov.com
> kachemaknordicskiclub.org
> kbrw.org
> livingstonslone.com
> mail.geeks907.com
> mail.matsutitle.com
> mail.rainierconnect.net
> manageit.entint.com
> mantechmechanical.com
> maps.511ride.alaska.gov
> mobility.alaskaheart.com
> monitorit.entint.com
> n-central.structured.com
> nwc-vueadmin.users.nome.uaf.edu
> p6.aicllc.com
> paragonpropertiesinc.com
> ps.ideafamilies.org
> ps.jsd.k12.ak.us
> ps.juneauschools.org
> pw.matsuk12.us
> pwr.asrc.com
> pwr.asrcfederal.com
> pwr.iaminupiaq.com
> remote.alaskaheart.com
> reset.gethotwired.com
> scanhome.com
> sitka.net
> sslvpn.hccontractors.net
> sslvpn.kakivik.com
> survbase.com
> sutus.com
> swallingcpas.com
> techgn.com
> techgnorth.com
> tempo.arcticslope.org
> valdezheliskiguides.com
> vdi.dol.alaska.gov
> vdiview.stantec.com
> video.denalifcu.com
> view.akwater.com
> view.tekmate.net
> visitkasilofalaska.com
> voipalaska.com
> vpn.yukonac.com
> watchit.entint.com
> watercolor.gi.alaska.edu
> web.akalpinelodge.com
> webctrl.sphosp.org
> webvac.muni.org
> wrrb-212-cm25-1.ospd.gi.alaska.edu
> xtr.correct.state.ak.us
> yakandyetialaska.com
> zmail.k12northstar.org
>
> Inversely sorted by domain component, they are:
>
> p6.aicllc.com
> akalpinelodge.com
> web.akalpinelodge.com
> view.akwater.com
> mobility.alaskaheart.com
> remote.alaskaheart.com
> alaskavaporsalliance.com
> bugs.asi-hsv.com
> pwr.asrc.com
> pwr.asrcfederal.com
> akdesktops.bannerhealth.com
> bhview.bannerhealth.com
> cityofsitka.com
> video.denalifcu.com
> denalitek.com
> drgeorgestransky.com
> manageit.entint.com
> monitorit.entint.com
> watchit.entint.com
> g2const.com
> geekinsideproductions.com
> geeks907.com
> mail.geeks907.com
> reset.gethotwired.com
> pwr.iaminupiaq.com
> inupiatgov.com
> sslvpn.kakivik.com
> livingstonslone.com
> mantechmechanical.com
> mail.matsutitle.com
> connect.nrim.com
> paragonpropertiesinc.com
> scanhome.com
> vdiview.stantec.com
> n-central.structured.com
> survbase.com
> sutus.com
> swallingcpas.com
> techgn.com
> techgnorth.com
> alaskausareports.ultiprotime.com
> eingang.uui-alaska.com
> valdezheliskiguides.com
> visitkasilofalaska.com
> voipalaska.com
> yakandyetialaska.com
> vpn.yukonac.com
> hp092366.gi.alaska.edu
> wrrb-212-cm25-1.ospd.gi.alaska.edu
> watercolor.gi.alaska.edu
> climate.iarc.uaf.edu
> nwc-vueadmin.users.nome.uaf.edu
> backmaps.511ride.alaska.gov
> backup.511ride.alaska.gov
> maps.511ride.alaska.gov
> vdi.dol.alaska.gov
> alaskavaporsalliance.info
> alaskavaporsalliance.net
> sslvpn.hccontractors.net
> mail.rainierconnect.net
> sitka.net
> view.tekmate.net
> alaskanmalamute.org
> alaskavaporsalliance.org
> tempo.arcticslope.org
> cityofbarrow.org
> ps.ideafamilies.org
> ps.juneauschools.org
> calendars.k12northstar.org
> zmail.k12northstar.org
> kachemaknordicskiclub.org
> kbrw.org
> webvac.muni.org
> webctrl.sphosp.org
> ps.jsd.k12.ak.us
> xtr.correct.state.ak.us
> pw.matsuk12.us
>
>
> Royce
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Fri Sep 4 08:58:32 2015

This archive was generated by hypermail 2.1.8 : Fri Sep 04 2015 - 08:58:32 AKDT