9db1060fbff83468
  • https://www.facebook.com/SNXTech
  • https://twitter.com/snxconsulting
  • https://www.linkedin.com/in/jftitan/
  • https://www.reddit.com/

A browser will first state its crypto preferences when establishing a TLS/SSL connection

The Distributed Computing & Security research team at the University of Hanover in Germany has implemented a browser encryption test page that analyses the way in which an HTTPS connection is established. One of the things it demonstrates is the accessing browser’s preferred crypto technique.

The first step when establishing an encrypted SSL/TLS connection is the “client hello”. In this step, the browser communicates its capabilities and sends a list of supported cipher suites, sorted according to preference. The list includes a method such as RSA for exchanging keys, a cryptographic hash function such as SHA1 for verifying messages and a symmetric-key method such as AES for encrypting the transmitted data. While all popular browsers now prefer AES in CBC mode, they also continue to support RC4, which has been cracked.

The page also shows which TLS version is supported by the browser. The ideal choice would be the current TLS 1.2, which was specified 5 years ago. TLS 1.2 contains fixes to mitigate the BEAST attack and defines alternatives to the ailing RC4 and AES/CBC crypto techniques. Unfortunately, the current reality is that only Chrome supports TLS 1.1 by default; Internet Explorer can handle 1.1 and 1.2 – but each must first be manually enabled by the user in the browser preferences. Firefox and Safari on Mac OS X are still stuck with TLS 1.0.

  • https://www.facebook.com/SNXTech
  • https://twitter.com/snxconsulting
  • https://www.linkedin.com/in/jftitan/
  • https://www.reddit.com/

Joseph Forbes (684)

Information Technology Consultant. For SMB, SOHO, and Online business. From Computers to Telecommunications this guy has been into it since hippies made it hip. Drone Pilot and Tech Aficionado I get to travel the State of Texas to help businesses succeed.

Welcome to our site! Which clearly looks nice, but not quite complete let.  As we continue to get our website migrated to this new host why not join us?  We have a Newsletter we send out from time to time that is informative as to what services we offer, and any notifications on what is going on, in the cyberspace world!?