Open alanorth opened 8 years ago
There are issues with aging 64-bit ciphers like Triple DES and we should disable them eventually. I logged the TLS ciphers negotiated on one of our busier hosts, and here are some numbers after seven days:
# zgrep "DES-CBC3" /var/log/nginx/site-access-ssl.log* | wc -l 217 # zcat -f -- /var/log/nginx/site-access-ssl.log* | wc -l 1164376
So, in other words, 0.02% of TLS connections are using Triple DES, mostly from weird user agents like:
0.02%
It's not urgent, but I'm leaving this here so we can act on it in a few months.
There are issues with aging 64-bit ciphers like Triple DES and we should disable them eventually. I logged the TLS ciphers negotiated on one of our busier hosts, and here are some numbers after seven days:
So, in other words,
0.02%of TLS connections are using Triple DES, mostly from weird user agents like:It's not urgent, but I'm leaving this here so we can act on it in a few months.