Announcement

Collapse
No announcement yet.

PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

    Originally posted by Dark Tangent View Post
    Forum SSL tweaks:

    After playing around with Ivan's great SSL Tools site I decided to disable SSL v.3 support, leaving only TLS support, as well as now requiring DH key exchanges and a minimum key length of 168 bits.

    If you are reading this it must still be working for you!
    It took me five minutes to find a browser I could use. This might not have been the very best choice you could have made. So far, it's only been IE 7 that was broken, but on three different machines (I don't have 6, and haven't installed 8).

    Comment


    • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

      Originally posted by shrdlu View Post
      It took me five minutes to find a browser I could use. This might not have been the very best choice you could have made. So far, it's only been IE 7 that was broken, but on three different machines (I don't have 6, and haven't installed 8).
      Works for FireFox 3.55. Fails on IE 8.

      Edit: TLS is enabled, but it appears that IE 8 only supports a key length of 128.
      Last edited by Thorn; December 1, 2009, 19:30.
      Thorn
      "If you can't be a good example, then you'll just have to be a horrible warning." - Catherine Aird

      Comment


      • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

        Originally posted by Thorn View Post
        Works for FireFox 3.55. Fails on IE 8.
        Confirmed, same thing happens for me.
        A third party security audit is the IT equivalent of a colonoscopy. It's long, intrusive, very uncomfortable, and when it's done, you'll have seen things you really didn't want to see, and you'll never forget that you've had one.

        Comment


        • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

          Works on iPhone's Safari
          "Why is it drug addicts and computer afficionados are both called users? " - Clifford Stoll

          Comment


          • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

            Originally posted by Dark Tangent View Post
            Forum SSL tweaks:

            After playing around with Ivan's great SSL Tools site I decided to disable SSL v.3 support, leaving only TLS support, as well as now requiring DH key exchanges and a minimum key length of 168 bits.

            If you are reading this it must still be working for you!
            Please. Put it back. Pretty please?

            Comment


            • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

              Originally posted by shrdlu View Post
              Please. Put it back. Pretty please?
              I'll turn off the DH requirement and watch logs to see if there are less errors.. if not I'll switch back on SSL 3.

              So strange because TLS 1 has been around for almost a decade!
              PGP Key: https://defcon.org/html/links/dtangent.html

              Comment


              • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                Originally posted by Dark Tangent View Post
                I'll turn off the DH requirement and watch logs to see if there are less errors.. if not I'll switch back on SSL 3.
                Whew. Works now.

                Originally posted by Dark Tangent View Post
                So strange because TLS 1 has been around for almost a decade!
                You are funny. Microsoft has been around much longer. Standards? Hah!

                Thanks for fixing it, though.

                Comment


                • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                  Post Defcon 17 Wrap-up has not had new activity for 2-3 weeks. It has been closed for new posting.

                  It will be archived in 1 or 2 weeks to the past defcon content.

                  Comment


                  • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                    User reported by email that https to defconpics.org doesn't work, but http to defconpics.orgdoes work. Changed https://pics.defcon.org/ banner link to defconpics from https to http. Fixed!

                    Thanks user!

                    Comment


                    • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                      Originally posted by TheCotMan View Post
                      User reported by email that https to defconpics.org doesn't work, but http to defconpics.orgdoes work. Changed https://pics.defcon.org/ banner link to defconpics from https to http. Fixed!

                      Thanks user!
                      Strange. https should work. Time to debug!
                      PGP Key: https://defcon.org/html/links/dtangent.html

                      Comment


                      • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                        Originally posted by Dark Tangent View Post
                        Strange. https should work. Time to debug!
                        defconpics isn't one of your servers. ;-)

                        pics.defcon.org and forums are fine. It was the link to someone else's server that isn't working with https.

                        Comment


                        • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                          Originally posted by TheCotMan View Post
                          defconpics isn't one of your servers. ;-)

                          pics.defcon.org and forums are fine. It was the link to someone else's server that isn't working with https.
                          Probably wouldn't be a bad idea to change the link on the front page of the Defcon site for Twitter, either. It's currently https://twitter.com/_defcon_ and Twitter is rejecting the connection. You can log into twitter from https, but it really doesn't like links to pages via https. Just saying.

                          Comment


                          • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                            Originally posted by shrdlu View Post
                            Probably wouldn't be a bad idea to change the link on the front page of the Defcon site for Twitter, either. It's currently https://twitter.com/_defcon_ and Twitter is rejecting the connection. You can log into twitter from https, but it really doesn't like links to pages via https. Just saying.
                            That would be Neil's area. Hey Neil!

                            Comment


                            • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                              I checked with Neil and he said the link worked for him:

                              https://twitter.com/_defcon_

                              I just checked it, and it worked for me, too.

                              Transient problem? Does it work for you now?

                              Comment


                              • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                                Forums going down for maintenance at 5:00pm pacific time. Should be back within 1 hour, before 6:00pm.

                                Comment

                                Working...
                                X