Fedora/Redhat and perfect forward secrecy

Alchemist raimiiic at gmail.com
Mon Aug 26 13:50:40 UTC 2013


2013/8/24 Reindl Harald <h.reindl at thelounge.net>

> https://bugzilla.redhat.com/show_bug.cgi?id=319901
>
> looks like Redhat based systems are the only remaining
> which does not support EECDHE which is a shame these
> days in context of PRISM and more and more Ciphers
> are going to be unuseable (BEAST/CRIME weakness)
> ______________________________________________________________
>
> https://bugzilla.redhat.com/show_bug.cgi?id=960193
> > ECC will be supported on RHEL-6.5 and will also be
> > part of the planned FIPS-140 revalidation
>
> so what is here state of play for Fedora?
> ______________________________________________________________
>
> https://www.google.at/search?q=postfix+EECDHE
> https://www.google.at/search?q=%22EECDHE-RSA%22
>
> http://en.wikipedia.org/wiki/Elliptic_curve_Diffie%E2%80%93Hellman
> http://en.wikipedia.org/wiki/Perfect_forward_secrecy
>
>
Very good discussion. This is an important issue.  OpenSSL with Elliptic
Curve was added to the http://rpmfusion.org/Wishlist, but the question
remains open


--
> users mailing list
> users at lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20130826/ae411223/attachment.html>


More information about the users mailing list