- From: Anne van Kesteren <annevk@annevk.nl>
- Date: Tue, 28 Oct 2014 11:52:18 +0100
- To: Martin Thomson <martin.thomson@gmail.com>
- Cc: "Mandyam, Giridhar" <mandyam@quicinc.com>, "public-media-capture@w3.org" <public-media-capture@w3.org>
On Tue, Oct 28, 2014 at 4:36 AM, Martin Thomson <martin.thomson@gmail.com> wrote: > BTW, congratulations are in order: you have just identified another > site that fails when you disable RC4 in your browser and the first > that I've found. For some reason, RC4 is the *only* ciphersuite this > site will negotiate. That's been the default DreamHost setup for quite some time so you haven't seen many sites then... However, they're in the process of updating this mess (whatwg.org just hasn't yet) and assuming you have a SHA-2 certificate you can score an A- on SSL Labs (for some reason forward secrecy is not enabled with all reference browsers). -- https://annevankesteren.nl/
Received on Tuesday, 28 October 2014 10:52:45 UTC