Viewing topic GoL HTTPS | GamingOnLinux

Title: GoL HTTPS

minj 3 Dec 2015

Link

The server uses TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher suite (suite id=0x0039[1]). DHE means Diffie-Hellman key exchange mechanism which is typically 1024bit assymetric cryptography. Unfortunately that might not be so secure any more[2] and many[3] of our accustomed protocols[4] are in danger.

While your SSL certificate expires only on May 19th, please consider changing it and/or your certificate authority now. Fortunately now is a very apt time to do so[5].

[1] https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-4
[2] https://freedom-to-tinker.com/blog/haldermanheninger/how-is-nsa-breaking-so-much-crypto/
[3] https://www.eff.org/deeplinks/2015/10/how-to-protect-yourself-from-nsa-attacks-1024-bit-DH
[4] https://stribika.github.io/2015/01/04/secure-secure-shell.html
[5] https://letsencrypt.org/2015/11/12/public-beta-timing.html

0 Likes

tuubi 3 Dec 2015

Link

Supporter Plus

View PC info

GOL might not exactly be a priority target for NSA or other organizations with the resources to crack DHE primes, but better safe than sorry I guess. :)

0 Likes

minj 3 Dec 2015

Link

Point is, I want to blacklist the suite and GoL is the only site so far I am having trouble with.

0 Likes

Liam Dawe 3 Dec 2015

Link

Admin

View PC info

I've sent this onto Levi, our server admin.

0 Likes

While you're here, please consider supporting GamingOnLinux on:

Reward Tiers: Patreon. Plain Donations:

PayPal.

This ensures all of our main content remains totally free for everyone! Patreon supporters can also remove all adverts and sponsors! Supporting us helps bring good, fresh content. Without your continued support, we simply could not continue!

You can find even more ways to support us on this dedicated page any time. If you already are, thank you!