PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • shrdlu
    Registered User
    • Apr 2006
    • 562

    #586
    Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

    Originally posted by Dark Tangent
    Forum SSL tweaks:

    After playing around with Ivan's great SSL Tools site I decided to disable SSL v.3 support, leaving only TLS support, as well as now requiring DH key exchanges and a minimum key length of 168 bits.

    If you are reading this it must still be working for you!
    It took me five minutes to find a browser I could use. This might not have been the very best choice you could have made. So far, it's only been IE 7 that was broken, but on three different machines (I don't have 6, and haven't installed 8).

    Comment

    • Thorn
      Easy Bake Oven Iron Chef
      • Sep 2002
      • 1819

      #587
      Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

      Originally posted by shrdlu
      It took me five minutes to find a browser I could use. This might not have been the very best choice you could have made. So far, it's only been IE 7 that was broken, but on three different machines (I don't have 6, and haven't installed 8).
      Works for FireFox 3.55. Fails on IE 8.

      Edit: TLS is enabled, but it appears that IE 8 only supports a key length of 128.
      Last edited by Thorn; December 1, 2009, 18:30.
      Thorn
      "If you can't be a good example, then you'll just have to be a horrible warning." - Catherine Aird

      Comment

      • streaker69
        • Mar 2008
        • 1141

        #588
        Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

        Originally posted by Thorn
        Works for FireFox 3.55. Fails on IE 8.
        Confirmed, same thing happens for me.
        A third party security audit is the IT equivalent of a colonoscopy. It's long, intrusive, very uncomfortable, and when it's done, you'll have seen things you really didn't want to see, and you'll never forget that you've had one.

        Comment

        • AgentDarkApple
          Public Security Section 9
          • Aug 2009
          • 224

          #589
          Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

          Works on iPhone's Safari
          "Why is it drug addicts and computer afficionados are both called users? " - Clifford Stoll

          Comment

          • shrdlu
            Registered User
            • Apr 2006
            • 562

            #590
            Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

            Originally posted by Dark Tangent
            Forum SSL tweaks:

            After playing around with Ivan's great SSL Tools site I decided to disable SSL v.3 support, leaving only TLS support, as well as now requiring DH key exchanges and a minimum key length of 168 bits.

            If you are reading this it must still be working for you!
            Please. Put it back. Pretty please?

            Comment

            • Dark Tangent
              The Dark Tangent
              • Sep 2001
              • 2732

              #591
              Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

              Originally posted by shrdlu
              Please. Put it back. Pretty please?
              I'll turn off the DH requirement and watch logs to see if there are less errors.. if not I'll switch back on SSL 3.

              So strange because TLS 1 has been around for almost a decade!
              PGP Key: https://defcon.org/html/links/dtangent.html

              Comment

              • shrdlu
                Registered User
                • Apr 2006
                • 562

                #592
                Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                Originally posted by Dark Tangent
                I'll turn off the DH requirement and watch logs to see if there are less errors.. if not I'll switch back on SSL 3.
                Whew. Works now.

                Originally posted by Dark Tangent
                So strange because TLS 1 has been around for almost a decade!
                You are funny. Microsoft has been around much longer. Standards? Hah!

                Thanks for fixing it, though.

                Comment

                • TheCotMan
                  *****Retired *****
                  • May 2004
                  • 8857

                  #593
                  Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                  Post Defcon 17 Wrap-up has not had new activity for 2-3 weeks. It has been closed for new posting.

                  It will be archived in 1 or 2 weeks to the past defcon content.

                  Comment

                  • TheCotMan
                    *****Retired *****
                    • May 2004
                    • 8857

                    #594
                    Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                    User reported by email that https to defconpics.org doesn't work, but http to defconpics.orgdoes work. Changed https://pics.defcon.org/ banner link to defconpics from https to http. Fixed!

                    Thanks user!

                    Comment

                    • Dark Tangent
                      The Dark Tangent
                      • Sep 2001
                      • 2732

                      #595
                      Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                      Originally posted by TheCotMan
                      User reported by email that https to defconpics.org doesn't work, but http to defconpics.orgdoes work. Changed https://pics.defcon.org/ banner link to defconpics from https to http. Fixed!

                      Thanks user!
                      Strange. https should work. Time to debug!
                      PGP Key: https://defcon.org/html/links/dtangent.html

                      Comment

                      • TheCotMan
                        *****Retired *****
                        • May 2004
                        • 8857

                        #596
                        Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                        Originally posted by Dark Tangent
                        Strange. https should work. Time to debug!
                        defconpics isn't one of your servers. ;-)

                        pics.defcon.org and forums are fine. It was the link to someone else's server that isn't working with https.

                        Comment

                        • shrdlu
                          Registered User
                          • Apr 2006
                          • 562

                          #597
                          Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                          Originally posted by TheCotMan
                          defconpics isn't one of your servers. ;-)

                          pics.defcon.org and forums are fine. It was the link to someone else's server that isn't working with https.
                          Probably wouldn't be a bad idea to change the link on the front page of the Defcon site for Twitter, either. It's currently https://twitter.com/_defcon_ and Twitter is rejecting the connection. You can log into twitter from https, but it really doesn't like links to pages via https. Just saying.

                          Comment

                          • TheCotMan
                            *****Retired *****
                            • May 2004
                            • 8857

                            #598
                            Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                            Originally posted by shrdlu
                            Probably wouldn't be a bad idea to change the link on the front page of the Defcon site for Twitter, either. It's currently https://twitter.com/_defcon_ and Twitter is rejecting the connection. You can log into twitter from https, but it really doesn't like links to pages via https. Just saying.
                            That would be Neil's area. Hey Neil!

                            Comment

                            • TheCotMan
                              *****Retired *****
                              • May 2004
                              • 8857

                              #599
                              Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                              I checked with Neil and he said the link worked for him:

                              https://twitter.com/_defcon_

                              I just checked it, and it worked for me, too.

                              Transient problem? Does it work for you now?

                              Comment

                              • TheCotMan
                                *****Retired *****
                                • May 2004
                                • 8857

                                #600
                                Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                                Forums going down for maintenance at 5:00pm pacific time. Should be back within 1 hour, before 6:00pm.

                                Comment

                                Working...