12 Feb: Camellia Appreciation Day!

[KlarkKentThe3rd]

Just checked on Waterfox and Safari. It works! (doesn't work)

[Moonchild]

Of course Waterfox doesn't work. Mozilla killed support for it a while ago, and Alex hasn't done anything to restore it.

[hujan86]

Mozilla killed support for it a while ago

Explains why I can't connect to the forum via Fennec F-Droid

[roytam1]

and it looks fun in SSLlabs report now!

And your point being?

SSLLabs simulates lots of clients to see weather they can connect or not, as shown in report.

[moonbat]

and it looks fun in SSLlabs report now!

And your point being?

All the Camellia ciphers are flagged as weak by this test

[Al6bus]

my ipad with ios 10 (safari) @ doesn't work either

[Moonchild]

All the Camellia ciphers are flagged as weak by this test

It's because they have started flagging ALL block ciphers as "weak". This is because there have been a few attacks against block ciphers recently and they will remain subject to that class of attack even though jumping to the conclusion that all CBC ciphers are by definition weak is going a bit too far.

Unfortunately, OpenSSL on which nginx builds currently doesn't implement AEAD/GCM versions of the suites with Camellia (while it is part of RFC 6367). I've opened an issue on their GitHub to please consider it and they are amenable to do so if someone would file a PR for it (I personally can't, my knowledge of C as a language is much more limited than C++ and I am too busy otherwise with UXP to research what's needed for this PR).
https://github.com/openssl/openssl/issues/11061

I've also opened a BZ bug against NSS to please consider adding AEAD/GCM suites with Camellia for future use. bug #1614758

[Dustie_Rose]

Thankyou guys for this very much appreciated free lesson. I did not know about this one, something to brush up about. Happy hearts day to those who acknowledge the event.
~Dustie_Rose

[THX-1139]

Personally I feel kind of satisfied, both at the fact that I chose the right browser, and the fact that the supposed "recommended" browsers;
Crum, FF,safari,opera etc cannot access this site today!

Off-topic:
I am almost tempted to play a joke; spam this thread on bitchute with a click bait title and see how many complain

[Admin]

Off-topic:

I am almost tempted to play a joke; spam this thread on bitchute with a click bait title and see how many complain

Of course we can't stop you if you really want to go and do this, but we do ask you show a little restraint.

[THX-1139]

Oh sorry I should have been more specific... I was Almost tempted by a random thought, but I am equally aware of the possible repercussions to such a stunt so I would not, nor would I advise it. Just sounded funny to me.

[Moonchild]

You're fine -- It was obviously meant as general advice, but also that we can't (nor will try to) stop you or anyone else from doing anything if you insist, even if unwise.

[THX-1139]

Still it is good advice, things like I thought of have a tendency to backfire in unexpected ways.
Maybe I should have included the /jk with the off topic part?
Anyways here's a better thought to make up for the last one:

[Vultural]

Accessed the forum, using the XP computer and FF 43 just now.
Perhaps the 12th deadline has passed.
Or I misunderstood the Carmilla only alert.

[Moonchild]

The deadline has passed.

[Al6bus]

my ipad with ios 10 (safari) @ doesn't work either

it's working now

[Moonchild]

my ipad with ios 10 (safari) @ doesn't work either

it's working now

. . . So is everyone now going to post here again that it works while it previously didn't on browsers that don't support the cipher? I hope not

[New Tobin Paradigm]

Seems all we have accomplished is expose the sheer amount of misinformation and confusion there is about security with a smidgen of abject hatred from outside sources. Just as well anyway. Maybe it will promote some deeper examination and learning for those whom are predisposed to that sort of thing. The rest? Well, we'll see.

[ron_1]

Dumb question: if Camellia is much better than AES, and I believe you guys that it is, why hasn't it gained more acceptance?

[New Tobin Paradigm]

That is a question better asked in Off Topic.