Re: [TLS] I-D Action: draft-ietf-tls-prohibiting-rc4-01.txt

[Watson Ladd <[e-mail]>]

On Fri, Oct 3, 2014 at 2:37 PM, James Cloos <[e-mail]> wrote:
>>>>>> "HK" == Hubert Kario <[e-mail]> writes:
>
> HK> Only about 1% of servers support only RC4 cipher, 1.5% if you're
> HK> using Firefox[1].
>
> When this first came up I test a few of them.  Some of the sites I
> tested had some sort of load balancing box listening on the main uri
> which redirected to the real servers.  In each of the cases of that
> sort where the redirecting box only supported rc4, the destinations
> all supported a reasonably modern set of ciphers.
>
> So the problem isn't just updating typical web servers, but also dealing
> with what are likely low-spec closed-source fronts.  It may be impossible
> for some of the rc4-only sites to fix that w/o replacing (probably over-
> priced) hardware.

Then that's what they are going to have to do at some point. SHOULD
pushes that point off with no reason.

>
> -JimC
> --
> James Cloos <[e-mail]>         OpenPGP: 0x997A9F17ED7DAEA6
>
> _______________________________________________
> TLS mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/tls



-- 
"Those who would give up Essential Liberty to purchase a little
Temporary Safety deserve neither  Liberty nor Safety."
-- Benjamin Franklin